Malicious code in exact-ticker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d73836084382b05119a191e8cca9859cc6d1233d4438d1d89b016447c822b7a3 The package exact-ticker was found to contain malicious code. Source: ghsa-malware f79afea8081e5bfa7bd2122f78ff54b8eccb0c1516de1a9c14a19a3ca7d2ffa6 A...

Malicious code in @orbitgtbelgium/orbit-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421c190facc026ad647e4bda5141049326833c8790e0dae8e48a651720f4fad0 The package @orbitgtbelgium/orbit-components was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190669 Malicious code in @orbitgtbelgium/orbit-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421c190facc026ad647e4bda5141049326833c8790e0dae8e48a651720f4fad0 The package @orbitgtbelgium/orbit-components was found to contain malicious code. Source: ghsa-malware...

Malicious code in react-library-setup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd7f28e9ee69ccd4dc343423efa26fbdc798388c2d4abdb85588cc5a532dd2c3 The package react-library-setup was found to contain malicious code. Source: ghsa-malware...

Malicious code in @orbitgtbelgium/time-slider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e31786ffabd43155f6f44bff0d14b7e2d5d7b4dd88bd5720bb7496f6608f9de5 The package @orbitgtbelgium/time-slider was found to contain malicious code. Source: ghsa-malware...

Malicious code in @trigo/bool-expressions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6798c49edd52f5db8414de6ec11538d35d915051f5d69bb07863965971915e57 The package @trigo/bool-expressions was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190684 Malicious code in @trigo/eslint-config-trigo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f323ad76d021234c96924ded9095572d18be962e0c71fb9cfbeb1fa43079e961 The package @trigo/eslint-config-trigo was found to contain malicious code. Source: ghsa-malware...

Malicious code in @trigo/eslint-config-trigo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f323ad76d021234c96924ded9095572d18be962e0c71fb9cfbeb1fa43079e961 The package @trigo/eslint-config-trigo was found to contain malicious code. Source: ghsa-malware...

Malicious code in @alaan/s2s-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e50bdec2a61138175bbd86f2b001903eb76400352b9bef5e55afcd6610fbbafa The package @alaan/s2s-auth was found to contain malicious code. Source: ghsa-malware f48811a0a401773ab205d7ce2a4ce4d1890a0ed23b75a75cd45e5140c702c99...

MAL-2025-190658 Malicious code in @asyncapi/html-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3514238d2df6a1ffca5fe310bff1d740b15544943cdf2e67ccf90e2e05acee0c The package @asyncapi/html-template was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190662 Malicious code in @asyncapi/nunjucks-filters (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51137a75fbced2a0515e71df0b97baf386e784c2eb5134c77ed77afdcb48fe34 The package @asyncapi/nunjucks-filters was found to contain malicious code. Source: ghsa-malware...

Malicious code in @ensdomains/content-hash (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39aeb9f2a2d9a8ee1c57695456c8af6657d069eaee694ef7f8c128bb292bfabd The package @ensdomains/content-hash was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198702

Malicious code in @zapier/secret-scrubber npm...

Malicious code in @zapier/secret-scrubber (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c109e973086267fe5b99a110c559267a26254a0bb87dcffbaf3fb69ea4bbca75 The package @zapier/secret-scrubber was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190691 Malicious code in @zapier/secret-scrubber (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c109e973086267fe5b99a110c559267a26254a0bb87dcffbaf3fb69ea4bbca75 The package @zapier/secret-scrubber was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190636 Malicious code in @asyncapi/generator (npm)

@asyncapi/generator version 3.3.1 was published as part of the "Miasma RAT" software supply-chain attack campaign identifier "miasma-train-p1" that compromised several widely used @asyncapi npm packages on 2026-07-14. The malicious code was injected using whitespace hiding: it is appended to a...

MAL-2025-190635 Malicious code in @asyncapi/avro-schema-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 563d7e586605241445ca55919018f95a81d98cbf9599eefa9c812eef9ccd7747 The package @asyncapi/avro-schema-parser was found to contain malicious code. Source: ghsa-malware...

Malicious code in chai-async-chain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e99ef9605c8341ad648b4f6fb3d4102c0288cf3742d3e1abe55c1d45d9fcdbec The package chai-async-chain was found to contain malicious code. Source: ghsa-malware fdec53906ddd8f960924b6b45b6c8a742115debcec85495bd0f052d7d13105...

Malicious code in hash-guard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b2ca55ce577caa1adabc53a3513e7b1d739be9cf9870f502d0dce75b44e2540 The package hash-guard was found to contain malicious code. Source: ghsa-malware 7c7e7dba950f2d191fe82c46ed3f9abd10509690b07fb3f1fb97f0ec39ff4304 Any...

Malicious code in @quick-start-soft/quick-markdown-image (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebaec604b88bfa99689645f0ecb3061111aa393606337785c71c2755493864f1 The package @quick-start-soft/quick-markdown-image was found to contain malicious code. Source: ghsa-malware...