Malicious code in @asyncapi/cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45b13eec1644f2d38922b7e61732a64ae6ee0d71810232ff15c95a3290de465d The package @asyncapi/cli was found to contain malicious code. Source: ghsa-malware 99e5bdb2a7d429f7e01403c432963826b244c3bed02a5a877ace1307b5fee3ad...

Malicious code in @alaan/s2s-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e50bdec2a61138175bbd86f2b001903eb76400352b9bef5e55afcd6610fbbafa The package @alaan/s2s-auth was found to contain malicious code. Source: ghsa-malware f48811a0a401773ab205d7ce2a4ce4d1890a0ed23b75a75cd45e5140c702c99...

MAL-2025-190658 Malicious code in @asyncapi/html-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3514238d2df6a1ffca5fe310bff1d740b15544943cdf2e67ccf90e2e05acee0c The package @asyncapi/html-template was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190662 Malicious code in @asyncapi/nunjucks-filters (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51137a75fbced2a0515e71df0b97baf386e784c2eb5134c77ed77afdcb48fe34 The package @asyncapi/nunjucks-filters was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190694 Malicious code in crypto-addr-codec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 900adb7a0d7713cca5ccdc793971f3489553656e4e132b80293ad56c55d05b2a The package crypto-addr-codec was found to contain malicious code. Source: ghsa-malware...

Malicious code in @ensdomains/content-hash (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39aeb9f2a2d9a8ee1c57695456c8af6657d069eaee694ef7f8c128bb292bfabd The package @ensdomains/content-hash was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190636 Malicious code in @asyncapi/generator (npm)

@asyncapi/generator version 3.3.1 was published as part of the "Miasma RAT" software supply-chain attack campaign identifier "miasma-train-p1" that compromised several widely used @asyncapi npm packages on 2026-07-14. The malicious code was injected using whitespace hiding: it is appended to a...

MAL-2025-190635 Malicious code in @asyncapi/avro-schema-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 563d7e586605241445ca55919018f95a81d98cbf9599eefa9c812eef9ccd7747 The package @asyncapi/avro-schema-parser was found to contain malicious code. Source: ghsa-malware...

Malicious code in chai-async-chain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e99ef9605c8341ad648b4f6fb3d4102c0288cf3742d3e1abe55c1d45d9fcdbec The package chai-async-chain was found to contain malicious code. Source: ghsa-malware fdec53906ddd8f960924b6b45b6c8a742115debcec85495bd0f052d7d13105...

Malicious code in hash-guard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b2ca55ce577caa1adabc53a3513e7b1d739be9cf9870f502d0dce75b44e2540 The package hash-guard was found to contain malicious code. Source: ghsa-malware 7c7e7dba950f2d191fe82c46ed3f9abd10509690b07fb3f1fb97f0ec39ff4304 Any...

Malicious code in @quick-start-soft/quick-markdown-image (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebaec604b88bfa99689645f0ecb3061111aa393606337785c71c2755493864f1 The package @quick-start-soft/quick-markdown-image was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190823 Malicious code in @quick-start-soft/quick-markdown-image (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebaec604b88bfa99689645f0ecb3061111aa393606337785c71c2755493864f1 The package @quick-start-soft/quick-markdown-image was found to contain malicious code. Source: ghsa-malware...

Malicious code in lion-second-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0070c2e566c699a1be9bf159d90a6b42fad16d6c4f74b7315c262ed5e5897f09 The package lion-second-package was found to contain malicious code. Source: ghsa-malware...

Malicious code in base62-58x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 329e19a0dfe372f18c65552e38f92a7cdaeae2c3bcfae8956d0a233a7885da88 The package base62-58x was found to contain malicious code. Source: ghsa-malware 5cd641e4e74a586087038295a99f8a1ee51c4b8ee02dd79da6aec94e39c39999 Any...

MAL-2025-190582 Malicious code in just-a-calculator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1b3b6dacc63b42851c61ae55e5168dbd9ff40172851cbfa980f489da54826f7 The package just-a-calculator was found to contain malicious code. Source: ghsa-malware...

TencentOS Server 3: tang (TSSA-2023:0292)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0292 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

MAL-2025-190579 Malicious code in hellospa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0582933888e4badd81ead15c78b68f8de23a0c728b5a1584f737bedcfd569184 The package hellospa was found to contain malicious code. Source: ghsa-malware f4e9282a1da51cf6409a4e5196d718d73e8f6f8dbddd339cbdd0535658517576 Any...

Malicious code in react-svg-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42e399f2b08fcb5a17dce3bb49a4f5dbeec6d8c56b34dab5586e8a84c5232d08 The package react-svg-helper was found to contain malicious code. Source: ghsa-malware f872307ebcfe0abab5b4fb796f5d770fd3678292ff059768bc62144d97fe03...

MAL-2025-190571 Malicious code in react-svg-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42e399f2b08fcb5a17dce3bb49a4f5dbeec6d8c56b34dab5586e8a84c5232d08 The package react-svg-helper was found to contain malicious code. Source: ghsa-malware f872307ebcfe0abab5b4fb796f5d770fd3678292ff059768bc62144d97fe03...

Malicious code in tailwindcss-breezium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f92d0ba07d104ef809e0b5b17fe93670e80af4cceecde2f9afb14f8357febcdc The package tailwindcss-breezium was found to contain malicious code. Source: ghsa-malware...