MAL-2026-430 Malicious code in storage-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2793f12e0ee779bcb14e4a4a5198059f576c8f832a64238e1584d6b2cd34209 The package storage-types was found to contain malicious code. Source: ghsa-malware 43db13077851634493e5c8eded5eb06487ff41dcb7dad90ab9a2e3101e14b323...

Malicious code in nanoid-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fad39f50bf85a03002a528aac3cf53797c47e72d196c7e0f9b92623e03088abf The package nanoid-js was found to contain malicious code. Source: ghsa-malware b20b5d4f24d425723aaaf45603909066d5983fe5341afba20f47d091f7ac0933 Any...

MAL-2026-425 Malicious code in plugin-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03d02d8d83b614a55ba66663cbaa93bfc062bb8de63f438fcd60bea960610a5f The package plugin-vue was found to contain malicious code. Source: ghsa-malware 5dd13d282d1e3afa8890341ff538701132443043511faaac6d79e562de074cb3 Any...

Malicious code in aws-crt-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82067e17b63298c1e09a6b616010b7a8ebf7f607510795f98428f8e5305994ab The package aws-crt-nodejs was found to contain malicious code. Source: ghsa-malware 40ddba391f5ca6a4fa75fe5e5440dfd1f57833b391d8db3c2e5918aef284a294...

Malicious code in debox-rn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c6316f21d7f4cc37cd04a537f7a26d6350f3212ac81ec7a7abe85512bdf64e4 The package debox-rn was found to contain malicious code. Source: ghsa-malware 3b1937a110a1a3babb2ae74750bc429ca28e901fcc7b3b02d822ef2f4911e1b3 Any...

Malicious code in shroom-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12ce31b267373b04b6db8fa70688917b146c9cf34f2d548b58890a950af4f32a The package shroom-kit was found to contain malicious code. Source: ghsa-malware df93160efafaee42f3f1c238618282cd6845e4fea4f6b0804f5e759934e60f71 Any...

MAL-2026-422 Malicious code in oce-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b843dd5f2dd468eea116bc6b01258c72903738ea423def44e73bbee3e0a477f The package oce-icons was found to contain malicious code. Source: ghsa-malware e946a5aefa4f4734044a2667883bff32c43c93401630708063066e1348fb2b25 Any...

Malicious code in oce-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b843dd5f2dd468eea116bc6b01258c72903738ea423def44e73bbee3e0a477f The package oce-icons was found to contain malicious code. Source: ghsa-malware e946a5aefa4f4734044a2667883bff32c43c93401630708063066e1348fb2b25 Any...

Malicious code in oce-collaborate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8f69f2284ec7835136d41eb191227cc52ebfeafd3b33c0f7ce2d94ffd24cb88 The package oce-collaborate was found to contain malicious code. Source: ghsa-malware c217eb60fb78e5a6fde1b59cd586b4ad864bd1ad9cde77d6b50a79341d4d58d...

Malicious code in oce-freecoin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c125cdfc091d53c54e0022436529ccd264a1ed699efaa196c1de728dbaf7a33d The package oce-freecoin was found to contain malicious code. Source: ghsa-malware 30b088dd8ef3dacfac096c97dd240b3a2132a977ba03dc7dc95b2b2528b2e60b A...

Malicious code in coopshares-webcomponent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a2f65589819f3e12665d8524a5db477f2c222a83ed178b584e7cf8e5901ead2 The package coopshares-webcomponent was found to contain malicious code. Source: ghsa-malware...

MAL-2026-408 Malicious code in bitbot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12996eb5ffac4767e62d0de9652080c360a42cc716421449362f9443c0ec02f4 The package bitbot was found to contain malicious code. Source: ghsa-malware 8167eda858c69a7322383c658afb961cdead784baba89931b2a10c0856c4a0cc Any...

Malicious code in universal-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd5b2c6fa041d1cac8de4366ee4973b7748dd0ef711771280413bd57d4318175 The package universal-provider was found to contain malicious code. Source: ghsa-malware...

Malicious code in anthropic-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49a0221a103a31cc2bf5e4f6c7d5fc7e0a8cbb2128d06aafe849e2c0df492fa8 The package anthropic-sdk was found to contain malicious code. Source: ghsa-malware fb69378ea2c4bf83cabc021e0e00f2cc8f87b8d9ddfd536f6e0285d10dbf4daf...

MAL-2026-405 Malicious code in anthropic-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49a0221a103a31cc2bf5e4f6c7d5fc7e0a8cbb2128d06aafe849e2c0df492fa8 The package anthropic-sdk was found to contain malicious code. Source: ghsa-malware fb69378ea2c4bf83cabc021e0e00f2cc8f87b8d9ddfd536f6e0285d10dbf4daf...

MAL-2026-416 Malicious code in hw-app-eth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b26da97535a707e0e93acd8bc34d6e7ad13756f38c37d34b362a36d4dbdef24a The package hw-app-eth was found to contain malicious code. Source: ghsa-malware 2f92f05cefb6ff5250762470390af00c1d4ccaf51b04cf8f1c15ab1721573a3f Any...

Malicious code in @kyriba/platform-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0a71fe72adcafe15eaf177857304a4032df3f3b0d15cc0d169a54d666f26be9 The package @kyriba/platform-frontend was found to contain malicious code. Source: ghsa-malware...

MAL-2026-379 Malicious code in @joaoxxx/internallib-v325 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f9c573db1b523cb0082a05f37710f4084f5ed28324fbe23186a7ebf9a0a082d The package @joaoxxx/internallib-v325 was found to contain malicious code. Source: ghsa-malware...

MAL-2026-391 Malicious code in internallib_v962 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9664f22a915362fceed28ec2e15ea4bfbc16dbdd91cb358cba05ef247fec36a5 The package internallibv962 was found to contain malicious code. Source: ghsa-malware 1e08ba6555343cafd51a03a186572eaf33065999ee721770a8d507645826dfd...

MAL-2026-392 Malicious code in jsonwebauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 683ba88a9e72aab5f114bdd388e92a35230a3fcad8178b8c8d5e5e6fddf7b829 The package jsonwebauth was found to contain malicious code. Source: ghsa-malware c1c270e023225a3ab0872fa3ea9f9b94b0320639bdaa6fb0d30e9b65c9ba1db2 An...