MAL-2026-1012 Malicious code in ultimates-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 199dbb458ff55c6d08022e6326014d56aceb99ef7748d6e898a6faac9bff201b The package ultimates-express was found to contain malicious code. Source: ghsa-malware...

MAL-2026-523 Malicious code in mapkit-example-svelte (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7e50c0bfa7ac259128381d1495bc907b68e4721214789ed3316c0a57e387175 The package mapkit-example-svelte was found to contain malicious code. Source: ghsa-malware...

MAL-2026-141 Malicious code in rt-long-form-content (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aafc418ec6a49447f89597e76416b14a45ffa82d65fb393dc3bb91d1fca38ac The package rt-long-form-content was found to contain malicious code. Source: ghsa-malware...

MAL-2026-73 Malicious code in chai-as-required (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d4e11cf62bfc3ebf38053f2a9100239db0bc6e3069a4cd202f4469c5095cacf The package chai-as-required was found to contain malicious code. Source: ghsa-malware 6fc3ec9f20ee6a20fa8c22b25629b78558ca88fca81f4b25f414ad2eb13dcb...

Malicious code in chai-as-required (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d4e11cf62bfc3ebf38053f2a9100239db0bc6e3069a4cd202f4469c5095cacf The package chai-as-required was found to contain malicious code. Source: ghsa-malware 6fc3ec9f20ee6a20fa8c22b25629b78558ca88fca81f4b25f414ad2eb13dcb...

MAL-2026-59 Malicious code in hello-world-npm-demo-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b3d59e455a083fe1d90b99dc29e2b1d207b769331e331fd1e01a28e2a1e7060 The package hello-world-npm-demo-example was found to contain malicious code. Source: ghsa-malware...

Malicious code in elf-stats-evergreen-pantry-410 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d976418a881400f0f90eb7c25e00a771dd436e1eb343eb5e90196886014adf14 The package elf-stats-evergreen-pantry-410 was found to contain malicious code...

MAL-2025-191376 Malicious code in @voiceflow/storybook-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8dad09f9af7bcfdd86347fd6e8c490939feed1f44cb5632ca2098db24ddbe7b The package @voiceflow/storybook-config was found to contain malicious code. Source: google-open-source-security...

MAL-2025-191335 Malicious code in @voiceflow/base-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58f955f868f3684364e34509e8ac923e40a6b84bf081690378886f6a64d77721 The package @voiceflow/base-types was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191353 Malicious code in @voiceflow/husky-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a4de04a484b7919bb905ccfcc2621196b18f11dc604a7b6e173b531f86c031c The package @voiceflow/husky-config was found to contain malicious code. Source: ghsa-malware...

Malicious code in @accordproject/concerto-analysis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd4dfaf2dbfd72597ed98e94903934d34e97ddd5dc4f7aeb7f5450767cb3a34c The package @accordproject/concerto-analysis was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191204 Malicious code in @clausehq/flows-step-sendgridemail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28e11e222c60736d3fbf0e7d232067bc608dbfdcb99484a13122cd9d2acd27f7 The package @clausehq/flows-step-sendgridemail was found to contain malicious code. Source: ghsa-malware...

Malicious code in @hapheus/n8n-nodes-pgp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9928cceb0a0a0ad3dbb386bd7f76fffc669c730ec26b54080a69b67bb12ba6f0 The package @hapheus/n8n-nodes-pgp was found to contain malicious code. Source: ghsa-malware...

Malicious code in typeface-antonio-complete (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c235d9ce1035017bbe5c1605d3915069791ed17717ac6c6aada75553b43286a4 The package typeface-antonio-complete was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191213 Malicious code in @dev-blinq/cucumber_client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db4a451970465311f6a1d2b9ac8b4713f2f4ff114aa37c12dd0daff6032c8ab6 The package @dev-blinq/cucumberclient was found to contain malicious code. Source: ghsa-malware...

Malicious code in @vishadtyagi/full-year-calendar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0a98d9edaa6960ab1d23c8814c145f45a3b318e204ab279c76bbe8a47daa044 The package @vishadtyagi/full-year-calendar was found to contain malicious code. Source: ghsa-malware...

Malicious code in @trackstar/react-trackstar-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2647efbf90d62ef589efff5f584440fd036864a85e5895dd1855ae0e641ca86 The package @trackstar/react-trackstar-link was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190894 Malicious code in @posthog/taxonomy-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6160bb29593f706f1623c9cc373f06290747d183e2d495f4d0afc169252d3046 The package @posthog/taxonomy-plugin was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190802 Malicious code in @caretive/caret-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dbdd6e96adf12b150ce3a286faf8fcab904140af31ec590599a3c1c01a3ba12 The package @caretive/caret-cli was found to contain malicious code. Source: ghsa-malware...

Malicious code in @louisle2/cortex-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c444e50876d5f75647d843c02c0b22a893e1129c31baca504e57985a07a2f5bb The package @louisle2/cortex-js was found to contain malicious code. Source: ghsa-malware...