MAL-2026-307 Malicious code in sd-conversation-history-module-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30c335176b96214a0cf97acfa97156cd4216c1aa6e764167f49cef0eaa89cc72 The package sd-conversation-history-module-client was found to contain malicious code. Source: ghsa-malware...

MAL-2026-263 Malicious code in @spx-workforceops/shared-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e3a2bf3fdf03e628dd6981636169c3053e7aa01b62d709e07a1e13184f0b93 The package @spx-workforceops/shared-vue was found to contain malicious code. Source: ghsa-malware...

MAL-2026-304 Malicious code in sd-agent-toolbar-module-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ac2576939df07755f988257b0f663de717ddc355bc9604a690d0abf25b74d19 The package sd-agent-toolbar-module-client was found to contain malicious code. Source: ghsa-malware...

MAL-2026-265 Malicious code in @wb-team/uikit-myteam-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdf39991881d2a08d3aa421675b4c1a7b562a4b50c70e7d9c0f7bb54a0d8f0e4 The package @wb-team/uikit-myteam-web was found to contain malicious code. Source: ghsa-malware...

MAL-2026-310 Malicious code in sky1oauth2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ca06041cd5b933101c6474a9f6054fb9dff579cf44ead75a1d1f906af0d6de The package sky1oauth2 was found to contain malicious code...

Malicious code in spire.officejs-externs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dfb46e06f3d17c765d605a42471cb4f6b75133ef12587b0dd769276a77fddcc The package spire.officejs-externs was found to contain malicious code...

Malicious code in kc-fe-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4347dd194760b4442f9bb1feab4f7133c2413af7958a4081f8cdea8367241da The package kc-fe-cli was found to contain malicious code. Source: ghsa-malware 42b0817927a50dccc81b965c476f842127ddf7f97445006910ebc9f6fa9e8026 Any...

MAL-2026-311 Malicious code in sparkling-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22829b6f6507a82b0a8acae51ea2b4cc5034afde231740f3eaede5e0af3a0fac The package sparkling-router was found to contain malicious code. Source: ghsa-malware 6e84c7e51a68544e8af8935aa539926a2bc3d269e42c78c99a3765e76c5477...

EUVD-2026-3078

Malicious code in cognito-auth-plugin npm...

Malicious code in assurance-common-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f8abc4852c66bf4b76ca608a34a2c7ec7a32f25ade245d11fd2eb4429d2ad48 The package assurance-common-components was found to contain malicious code. Source: ghsa-malware...

EUVD-2026-3051

Malicious code in tailwind-merge-v2 npm...

Malicious code in textual-sorter-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3afbb34c235a6e723240bd6cf03017355ea0a672b66fe36903bd1b7ef4fd050 The package textual-sorter-lib was found to contain malicious code. Source: ghsa-malware...

EUVD-2026-3099

Malicious code in kc-fe-cli npm...

EUVD-2026-3094

Malicious code in sparkling-router npm...

EUVD-2026-3054

Malicious code in sd-navbar-module-client npm...

EUVD-2026-3096

Malicious code in s3-cache-handler npm...

EUVD-2026-3092

Malicious code in spire.officejs-fonts npm...

EUVD-2026-3065

Malicious code in lusha-ui-components npm...

Malicious code in victim-package-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63c6e07506d6bce3381b3ad191f41efdd8c5cf244efe3e5302c93a22f4a3f862 The package victim-package-a was found to contain malicious code. Source: ghsa-malware e92a76802a941997e89cb243c7f4f37405b7865b7cc8e5b90aa9accb864ced...

Malicious code in dws-dx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1848d83c748ccd9cbb44be0e7d1b8e97b061b5f8f5214616639aea3339b6058b The package dws-dx was found to contain malicious code. Source: ghsa-malware 1e1aaa27dc21f4ca10b5c3d7ae20cf56d8ede985793d6dd4654d34b1716b3d7b Any...