MAL-2026-1312 Malicious code in iron-overlay-behavior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f1c6c5a0c7da957deff9af5f6e981a6d5cf588394ad85aaaa9456657d49604e The package iron-overlay-behavior was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1162 Malicious code in xpack-test-3.0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4fcebf35e85158afa53ce21da1265a4c3acac20914c4c76285d9043ac3a2d62 The package xpack-test-3.0 was found to contain malicious code. Source: ghsa-malware 825d559cd29d6d2efd0f89583e84f31a7b471bfbc3376252e71872d8f9863d87...

MAL-2026-1020 Malicious code in @ai-studio-web/app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a29e5e23697b695bdd456d100ba49a1ef5c6f4450b46672dedcd164a073e8eb The package @ai-studio-web/app was found to contain malicious code. Source: ghsa-malware...

MAL-2026-955 Malicious code in crypto-locale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e346cfc58b0d84fb5b56985729f7ec92a226ef106b0ab10f299e65a62028834d The package crypto-locale was found to contain malicious code. Source: ghsa-malware 00686734db6a3f5477c1047f779749296dddb0c7eab5294000e13ed7b194c74d...

MAL-2026-581 Malicious code in somesomesomesome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 501ce83717dc490a4b5550820a3d811bc7a90579dbf986bfb3013d0997ae3802 The package somesomesomesome was found to contain malicious code. Source: ghsa-malware 6ac6ff72ae68c24308f36c03065bd3d4f95aea678ce410a4edb706f73499e6...

MAL-2026-541 Malicious code in pump.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b989d2f8fd56b43d56fd7cba25a48eaa37478729351505f297fc92fb125f697 The package pump.js was found to contain malicious code. Source: ghsa-malware 90ba9c17ff971763631161abd0a0b8dff35b945e9b81791ab4630ecf76af2185 Any...

Malicious code in dreame-claude (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b904b33e89c1b805a677ba354efd9fb3a2433181457eaa178dde53d834a387 The package dreame-claude was found to contain malicious code. Source: ghsa-malware 4af60f8f709a4f9b864b976407e3415357526d2edebe39413dd0de8b3783578b...

Malicious code in @workleap-ai/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2800f2cfba8ac6e7a16ef977484e4da4d360c859848daedb5220c7d3595653e1 The package @workleap-ai/shared was found to contain malicious code. Source: ghsa-malware...

MAL-2026-140 Malicious code in rt-live-hero (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b963cc4f9c61717fb440dbd17f3897337fd7aa94a3d077bcd8307c2faf109c57 The package rt-live-hero was found to contain malicious code. Source: ghsa-malware f56b0f0c83fe7af0849099067abaa56333d2eadffeb3f8152244c74b40a706d6 A...

MAL-2026-142 Malicious code in rt-qa-sampler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01d57d7fdf7de875c7da43a03defcfe1df8c66f3a72a0802585f903e5e4e4a19 The package rt-qa-sampler was found to contain malicious code. Source: ghsa-malware 7db994932160920a0a11f0ca0419898a6c0552e1f38b68ccf9bb6b59d72f98fb...

MAL-2026-144 Malicious code in scrollbar-stylecss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1feac6b077daf292c9f1be24ff5b49cfd07da882dda73a98dcba56ea0a4c903 The package scrollbar-stylecss was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192675 Malicious code in xnetgpt-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71954a410f80b8f6624ea3f25761c2590f558b97a000cf4e48413856e28516db The package xnetgpt-lite was found to contain malicious code. Source: ghsa-malware 667f6919693429b64e5a65f3b4d5f350ab3af5d1abedc44b073110b3b7f65344 A...

Malicious code in pwnxmljs2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d75eeb837f4024f3920feb26929799feba135cabde043784e6c507307f53e93c The package pwnxmljs2 was found to contain malicious code. Source: ghsa-malware 9af680322f600f8fa1071354bd332d92ccbdf912f8005a7eb68aff2f2b895b79 Any...

Malicious code in sds-swissid-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfba6a19220522fe10bbf564a1b96c3b7da5de600c03e1e683976b0c6cd36aeb The package sds-swissid-common was found to contain malicious code. Source: ghsa-malware...

Malicious code in tdspt-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df7e9f891a48c1bea4bde6673484ff604dfe90e6e99972469417fbec69d0eac4 The package tdspt-helper was found to contain malicious code. Source: ghsa-malware b3fbe7c3c4241a699aa4e7bcd9abdaf9fdb9f37eb27d178e235db8f5ee4402a2 A...

MAL-2025-191467 Malicious code in xrpl-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fb3e61af99fea7b1567f2fa35f2558959e9c0c63f777bc5d37f6e48378ec31f The package xrpl-api was found to contain malicious code. Source: ghsa-malware 892f832257ae1ca9ec7f8ad76b11821b4808750298e4842ff44aa3459b54a125 Any...

MAL-2025-191430 Malicious code in soneium-acs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47ef13235ddcf50988ca14c257fc3e88969c7a99cd07389710789ef758dba1f7 The package soneium-acs was found to contain malicious code. Source: ghsa-malware 0dd54268e2cc4c0ffd1059655c96c56400b08d5eb44bdf09753b1aec34aac8fa An...

MAL-2025-191030 Malicious code in @lessondesk/material-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 124d8e4d2ba731e6a005fd1c68c60af6629b037c8c121d0468394110d2f98103 The package @lessondesk/material-icons was found to contain malicious code. Source: ghsa-malware...

Malicious code in @lessondesk/eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef9fcb377fe99dad0e34ec63a5ac929adfc5d8be48e49d330d4785e1d2a6a7f The package @lessondesk/eslint-config was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191135 Malicious code in normal-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f3cc821206cbfa969e8f4e3472a09caf43736b8e70d4ec80ed20931b64406b8 The package normal-store was found to contain malicious code. Source: ghsa-malware 1e1d6a2537e74912ec3831bf85e49e8ba908fc28838ec60c07f7218717ba36ae A...