137476 matches found
Malicious code in chai-chain-dom (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1964693dd7c2bdd9ca7ae20eb441597571b1b78a689bd97648998c6442bda99 Package impersonates the pino logger exports module.exports.pino, README uses pino badge, keywords mimic pino but its actual behavior is a remote cod...
Malicious code in jsf-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6a2a0bbd4939a789673bdca08866c9be58dd361df175695e7f8c1141bed4e47 On require'jsf-utils', lib/string/pathcase.js runs a top-level async IIFE that fetches a JavaScript payload from https://jsonkeeper.com/b/BPB86 and...
Malicious code in typescript-base58 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b860a9c4960f55c236ca5e14781f5dcfb60752d4367cb9aeb30762d3b023004e [email protected] is a one-line re-export of the 'base58-core' package. The README advertises 'Zero dependencies' while package.json declares a...
Malicious code in base58-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60a7d188e2cd79918987f2008e93bb80ea9979d791b357f8f7cfd892321ded6c The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-6922 Malicious code in mcp-server-pg (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22d68bdfced357622e33e4608bd35ded4d8988ea6dc7da073b3a83075978815d On npm install, scripts/postinstall.js unconditionally reads a range of installer-owned identity and configuration files and POSTs a JSON payload to ...
ROOT-APP-NPM-CVE-2026-22029 CVE-2026-22029 in @rootio/react-router - Patched by Root
Root has patched CVE-2026-22029 in the @rootio/react-router package for Root:npm. Multiple fixed versions available...
MAL-2026-7443 Malicious code in zircuit-keeper (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7442 Malicious code in yreactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7439 Malicious code in win-env-setup (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7438 Malicious code in whaleco-assets-json (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7436 Malicious code in wazirx-localtestnpm (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7434 Malicious code in wallarm-design-system (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7433 Malicious code in vubiquity-website (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7432 Malicious code in vscode-component-explorer (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7429 Malicious code in treactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7427 Malicious code in swiper-css-normalize (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7426 Malicious code in suit-base (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7418 Malicious code in serverless-twi-testing (npm)
--- -= Per source details. Do not edit below this line.=-...