yggdrasil-worker-package-manager security update

0.2.3-4 - Bump release for rebuild...

ALSA-2026:5145 Important: yggdrasil-worker-package-manager security update

yggdrasil-worker-package-manager is a simple package manager yggd worker. It knows how to install and remove packages, add, remove, enable and disable repositories, and does rudimentary detection of the host it is running on to guess the package manager to use. It only installs packages that matc...

Malicious Package

Overview chai-as-constrained is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in zip.js-2.8.2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10faa984dcce106c0df9aa067d4df43300087a73598df5ef841c874d9b507042 The package zip.js-2.8.2 was found to contain malicious code...

MAL-2026-1881 Malicious code in zip.js-2.8.2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10faa984dcce106c0df9aa067d4df43300087a73598df5ef841c874d9b507042 The package zip.js-2.8.2 was found to contain malicious code...

MAL-2026-1880 Malicious code in zero-develop-component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b25ede928413a72b6cfc25c807bc6f5902bd1b9d00f1d3d83624e237da613fb1 The package zero-develop-component-library was found to contain malicious code...

Malicious code in yahoo-commerce (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3725b1c28bf27cb9ae988e61fc0c7b790b588587cef59086e7d63460f2241a9 The package yahoo-commerce was found to contain malicious code...

Malicious code in wpt-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6928aebd6d492c4618abb9136b97cdf065cf37f91fab0e0a11a5688cd0e4f5f7 The package wpt-client was found to contain malicious code...

Malicious code in wiz-redirects (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e5f8353324161f110374c793ad9863bcc2634aebf62229b8bb88d7398f3115 The package wiz-redirects was found to contain malicious code...

MAL-2026-1877 Malicious code in wiz-redirects (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e5f8353324161f110374c793ad9863bcc2634aebf62229b8bb88d7398f3115 The package wiz-redirects was found to contain malicious code...

MAL-2026-1876 Malicious code in wiz-production (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c47a9702cc34ce262bad0b6b1fcd15e0da6eb2c980071e7f80a486a029a316dc The package wiz-production was found to contain malicious code...

MAL-2026-1874 Malicious code in wiz-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be8c0c61ad6d8e5e76edbce5a6e053676767ed4dcabed1c20389db704cc20411 The package wiz-dev was found to contain malicious code...

MAL-2026-1873 Malicious code in vvvv4234 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3fcc59e0dc323432a0f7e6f7fd19cad27a4a9811b9f3614906a6943c48a882b The package vvvv4234 was found to contain malicious code...

Malicious code in vvvv4234 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3fcc59e0dc323432a0f7e6f7fd19cad27a4a9811b9f3614906a6943c48a882b The package vvvv4234 was found to contain malicious code...

MAL-2026-1872 Malicious code in user_migration (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a952d55363362a942ec86eee421ffd30f1de7fbc2e9575ea1a37eaae9a73603 The package usermigration was found to contain malicious code...

Malicious code in user_migration (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a952d55363362a942ec86eee421ffd30f1de7fbc2e9575ea1a37eaae9a73603 The package usermigration was found to contain malicious code...

Malicious code in urti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce210748591c19c8937ecaf130c45acf772c6e762dc06ce07f48d5d8d512c451 The package urti was found to contain malicious code...

Malicious code in tss12111 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5555634991a4c64a764e555ae6b0c69b17ebdedc0c581f558eff46d2fef417d1 The package tss12111 was found to contain malicious code...

MAL-2026-1869 Malicious code in tss12111 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5555634991a4c64a764e555ae6b0c69b17ebdedc0c581f558eff46d2fef417d1 The package tss12111 was found to contain malicious code...

Malicious code in thread_ppe-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94a9d2420c318197cca9d0d4523f1049462bd1abfbe0288f9679074611434235 The package threadppe-test was found to contain malicious code...