MAL-2025-190781 Malicious code in scgsffcreator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca94ec4e3681855a45287e7aebaa6293b5416e803022d7fb318e447cd18f49bc The package scgsffcreator was found to contain malicious code. Source: ghsa-malware 57471dc81b8368989c69a7f00f7b480aa7036def63b216094e6aca18730e0a16...

MAL-2025-190787 Malicious code in vite-plugin-httpfile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d63741ea6b6aadbc224aabf56e98c5eb7b664d7554dbb502869a97ffffb2f46 The package vite-plugin-httpfile was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190726 Malicious code in @ensdomains/curvearithmetics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8d0412a2e09e5e875c436da127697b8fe370cc878272dc55216b4d6b16d13c The package @ensdomains/curvearithmetics was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190727 Malicious code in @ensdomains/dnsprovejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cba062a1b19731497546d926af22ae0964962df93fc3bd059d0e66df0fd41521 The package @ensdomains/dnsprovejs was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190736 Malicious code in @ensdomains/reverse-records (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e16814335619e8655b02ca0583e019d232eb4f008db3e99d25f3ad1eb3d18c The package @ensdomains/reverse-records was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190740 Malicious code in @ensdomains/unicode-confusables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f25465205590fbceb2bb8ae1db02fd1e80f8d085af135427cd757a3b08a1da6 The package @ensdomains/unicode-confusables was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190764 Malicious code in atrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8da24292f4db1ed3effb33c2c59b8af736f288754619eb8904e12b77cab37dc The package atrix was found to contain malicious code. Source: ghsa-malware 892133ca29450416a2608e73a523b5113e423356a6f8c0098602e7c5173b5121 Any...

MAL-2025-190754 Malicious code in @postman/node-keytar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4c8023740ffdaef4872c662f4f7be6f3258a479dfb93494adda9c170fa4818 The package @postman/node-keytar was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190659 Malicious code in @asyncapi/markdown-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eab3f67164575b589affd305405ab98f13239b541ad15720274e6657e7f6571 The package @asyncapi/markdown-template was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190697 Malicious code in exact-ticker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d73836084382b05119a191e8cca9859cc6d1233d4438d1d89b016447c822b7a3 The package exact-ticker was found to contain malicious code. Source: ghsa-malware f79afea8081e5bfa7bd2122f78ff54b8eccb0c1516de1a9c14a19a3ca7d2ffa6 A...

MAL-2025-190700 Malicious code in react-library-setup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd7f28e9ee69ccd4dc343423efa26fbdc798388c2d4abdb85588cc5a532dd2c3 The package react-library-setup was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190699 Malicious code in react-element-prompt-inspector (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58c142c9370bed76cfd7eb230462162a911d50057bbbc351f019dae4a8208784 The package react-element-prompt-inspector was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190689 Malicious code in @trigo/pathfinder-ui-css (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17172dc9e8dbb38a33e93a30996ed58f73c89d22d064635c816f92f8697a5013 The package @trigo/pathfinder-ui-css was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190677 Malicious code in @trigo/atrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 558f6feeb49a87304641f2c0c9925edfed565c25407412c22ec77f6dd814dc4f The package @trigo/atrix was found to contain malicious code. Source: ghsa-malware 305ce62c26f6bb221f9779da6dd55b49fd970a1bf8939a813a5951bb2e4f5a07 A...

MAL-2025-190683 Malicious code in @trigo/bool-expressions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6798c49edd52f5db8414de6ec11538d35d915051f5d69bb07863965971915e57 The package @trigo/bool-expressions was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190688 Malicious code in @trigo/node-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c68fcc8b44cce3e356e21d793a260c66c48b40eb7283140b4e1e1f3ccc191660 The package @trigo/node-soap was found to contain malicious code. Source: ghsa-malware 5e716e9be0271391b5264d23544b7f5de65a55b9fdf09ef9b7c05dc2050209...

MAL-2025-190682 Malicious code in @trigo/atrix-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51a9ee65fa4e448ca6d2c3b832232b73b5a2137ad1a4f7cf30bcce00497e5263 The package @trigo/atrix-redis was found to contain malicious code. Source: ghsa-malware...

Second Sha1-Hulud Wave Affects 25,000+ Repositories via npm Preinstall Credential Theft

Multiple security vendors are sounding the alarm about a second wave of attacks targeting the npm registry in a manner that's reminiscent of the Shai-Hulud attack. The new supply chain campaign, dubbed Sha1-Hulud , has compromised hundreds of npm packages, according to reports from Aikido,...

MAL-2025-190678 Malicious code in @trigo/atrix-acl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1709080673e2717f0cff39ad90b7c825ced5be2378f46a4ebdceadbf9b3f184c The package @trigo/atrix-acl was found to contain malicious code. Source: ghsa-malware 52dbc146720620532d9726aeba591e83cd1d56841d1242aeebd3f160f72c0d...

MAL-2025-190672 Malicious code in @posthog/rrdom (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b58f6a4822c61ea47436ea08eeb6ab0f8083fd7fed7ea3c2c42a832ab84a57ba The package @posthog/rrdom was found to contain malicious code. Source: ghsa-malware 6ad32d1af00f220489835e70f37db33a18034db715e2b750dc95639ba7e05d75...