Malicious code in hexdrift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91f6b00b26052d34947326afc5e17df34500b077e8ed58daa9e9f67c3a93737e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14507 Malicious code in foldmap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 569b7cd07b2dc5be0a93c14cf8798990210cdc1210dc7dc842dab5017f69f551 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14508 Malicious code in hexdrift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91f6b00b26052d34947326afc5e17df34500b077e8ed58daa9e9f67c3a93737e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in snapbuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e168e9030eb691c5aebf895664898b4090aeca8d6626fa9f58cf8fd960db7579 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14510 Malicious code in snapbuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e168e9030eb691c5aebf895664898b4090aeca8d6626fa9f58cf8fd960db7579 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in dim-svelte-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46198c284561b470d637b4b03d0be89420c7f06c269360a900f3969f345bb6ca The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14506 Malicious code in dim-svelte-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46198c284561b470d637b4b03d0be89420c7f06c269360a900f3969f345bb6ca The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in svelte-cls-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea3c51575af766a500130198af6b3b93efbc81f522edb9e0deec2a9da0a421db The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14511 Malicious code in svelte-cls-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea3c51575af766a500130198af6b3b93efbc81f522edb9e0deec2a9da0a421db The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in r4wk-book (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f5cbca68751eb879140f7c896a0dc3c324e9f4dbc8a1651b38b246b299ba4eb On npm install, the package's postinstall hook runs node.worker.js, which detaches a background child, waits a jittered delay, and opens a TCP socket...

Malicious code in typedoc-xyz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0351fe37644a8a60b6072329167e3b1cbbc8ebac67ec75b453a475e90ac67a15 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14513 Malicious code in typedoc-xyz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0351fe37644a8a60b6072329167e3b1cbbc8ebac67ec75b453a475e90ac67a15 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14512 Malicious code in tailwind-scrollbar-hider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaa2dba899c9723740dfcc2fe8588bcf695f021442bbe8de1156239029bf7987 dist/index.js exports a small legitimate scrollbarHide Tailwind plugin and then executes evalatob'' at module top level, so the payload runs on any...

Malicious code in tailwind-scrollbar-hider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaa2dba899c9723740dfcc2fe8588bcf695f021442bbe8de1156239029bf7987 dist/index.js exports a small legitimate scrollbarHide Tailwind plugin and then executes evalatob'' at module top level, so the payload runs on any...

shadcn-ui-lib (>=0.0.9, <=0.0.18) potentially affected by CVE-2026-55596 via @platejs/media (53.0.0)

@platejs/media NPM version 53.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @platejs/media and may be impacted: - shadcn-ui-lib =0.0.9, =0.0.18 Source cves: CVE-2026-55596 Source advisory: OSV:GHSA-QJ6X-XX2H-8HVV...

Malicious code in voice-crate-check (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d4e872ad9052cdd5d86c4c1656c57e5a899513853824efc24d4636a3c1679e3 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14504 Malicious code in video-crate-check (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdb2c9b6369a68d75f6e0df274da90f2685d5735f944992516f13c3e9f60b0b9 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14505 Malicious code in voice-crate-check (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d4e872ad9052cdd5d86c4c1656c57e5a899513853824efc24d4636a3c1679e3 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in video-crate-check (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdb2c9b6369a68d75f6e0df274da90f2685d5735f944992516f13c3e9f60b0b9 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in text-crate-check (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 163de9a9fb651da86f266476767aea6f3b53b316ad3a3b269d469e6447fe43bd The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...