MAL-2026-276 Malicious code in closure-net (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 410d3b94b9a6867a17fa4f4cce19f0802ad4055417d675c5d28cc79d68b55468 The package closure-net was found to contain malicious code. Source: ghsa-malware 3499f9af0c0265b25c4a428a4d94e7c58a97c6cf3c6f9c536ef55a99fd041875 An...

MAL-2026-310 Malicious code in sky1oauth2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ca06041cd5b933101c6474a9f6054fb9dff579cf44ead75a1d1f906af0d6de The package sky1oauth2 was found to contain malicious code...

MAL-2026-304 Malicious code in sd-agent-toolbar-module-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ac2576939df07755f988257b0f663de717ddc355bc9604a690d0abf25b74d19 The package sd-agent-toolbar-module-client was found to contain malicious code. Source: ghsa-malware...

MAL-2026-299 Malicious code in origin_response_handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 430f01e7a54ba6e13e0d26328d24c5fc2c743d67188653b4d61891fedb6dc68f The package originresponsehandler was found to contain malicious code. Source: ghsa-malware...

EUVD-2026-3054

Malicious code in sd-navbar-module-client npm...

EUVD-2026-3096

Malicious code in s3-cache-handler npm...

EUVD-2026-3092

Malicious code in spire.officejs-fonts npm...

EUVD-2026-3065

Malicious code in lusha-ui-components npm...

Malicious code in victim-package-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63c6e07506d6bce3381b3ad191f41efdd8c5cf244efe3e5302c93a22f4a3f862 The package victim-package-a was found to contain malicious code. Source: ghsa-malware e92a76802a941997e89cb243c7f4f37405b7865b7cc8e5b90aa9accb864ced...

Malicious code in dws-dx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1848d83c748ccd9cbb44be0e7d1b8e97b061b5f8f5214616639aea3339b6058b The package dws-dx was found to contain malicious code. Source: ghsa-malware 1e1aaa27dc21f4ca10b5c3d7ae20cf56d8ede985793d6dd4654d34b1716b3d7b Any...

Malicious code in spire.officejs-externs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dfb46e06f3d17c765d605a42471cb4f6b75133ef12587b0dd769276a77fddcc The package spire.officejs-externs was found to contain malicious code...

Malicious code in kc-fe-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4347dd194760b4442f9bb1feab4f7133c2413af7958a4081f8cdea8367241da The package kc-fe-cli was found to contain malicious code. Source: ghsa-malware 42b0817927a50dccc81b965c476f842127ddf7f97445006910ebc9f6fa9e8026 Any...

EUVD-2026-3078

Malicious code in cognito-auth-plugin npm...

Malicious code in assurance-common-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f8abc4852c66bf4b76ca608a34a2c7ec7a32f25ade245d11fd2eb4429d2ad48 The package assurance-common-components was found to contain malicious code. Source: ghsa-malware...

EUVD-2026-3051

Malicious code in tailwind-merge-v2 npm...

Malicious code in textual-sorter-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3afbb34c235a6e723240bd6cf03017355ea0a672b66fe36903bd1b7ef4fd050 The package textual-sorter-lib was found to contain malicious code. Source: ghsa-malware...

EUVD-2026-3099

Malicious code in kc-fe-cli npm...

MAL-2026-301 Malicious code in react-sitecore-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bcb38af52d8a28ad89a31c0415f1673eb2ca18ec76121703ded6334a6b7e6d2 The package react-sitecore-library was found to contain malicious code. Source: ghsa-malware...

MAL-2026-288 Malicious code in insightvm-ui-nav-menus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24e901eb03445094160df9df30313f817015ba26cdd09e82d4f527261acda35 The package insightvm-ui-nav-menus was found to contain malicious code. Source: ghsa-malware...

MAL-2026-311 Malicious code in sparkling-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22829b6f6507a82b0a8acae51ea2b4cc5034afde231740f3eaede5e0af3a0fac The package sparkling-router was found to contain malicious code. Source: ghsa-malware 6e84c7e51a68544e8af8935aa539926a2bc3d269e42c78c99a3765e76c5477...