MAL-2025-192406 Malicious code in datadog-checks-dependency-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 965b1dfdded3e786f1691c392462534c6a7dc105aa989d08e68ff1b6c9f78bc7 The package datadog-checks-dependency-provider was found to contain malicious code. Source: ghsa-malware...

Malicious code in node-calculator-0d96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a218c7694e38a516577be3b65e74e782080f98629b0cc39516beab80562f57b The package node-calculator-0d96 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192373 Malicious code in @notrainers/nobtrainer-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f897e383035341f83bc0c7357ec775c42dcf5f88689994882325daf4c5c6730 The package @notrainers/nobtrainer-sdk was found to contain malicious code. Source: ghsa-malware...

Malicious code in dotnetenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad45bf9bd262cf43bb28421d876fa019b6f14d3699854454ae1677b0383a90a2 The package dotnetenv was found to contain malicious code. Source: ghsa-malware 1de4b94766b2d429c31b5469528ed35738f14af710e091dbd47b838649173953 Any...

MAL-2025-192311 Malicious code in react-icon-updater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 755e55af72b70c14edf83bdaea2cbd76dff5c7ab6410f9e3f44f7b521e7248b3 The package react-icon-updater was found to contain malicious code. Source: ghsa-malware...

Malicious code in kwp-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b9ede748713472b716d7f508167d66d972607368a0674962d092728ee8ed184 The package kwp-router was found to contain malicious code. Source: ghsa-malware a55b4e54ef732ba70cdf1b376d19fe90c45e48f36c812166e99545e9e798b807 Any...

MAL-2025-191556 Malicious code in btc-transaction-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 291d3fea363888c43824aaaa26f2eb389674822baacb18e5ff7498c9cfc74dee The package btc-transaction-helper was found to contain malicious code. Source: ghsa-malware...

Malicious code in ui-cluster-driver-otccce (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab4e0c2fa1483c63a547be16744188b63b2c41acb5704b081cd0cdc46b570458 The package ui-cluster-driver-otccce was found to contain malicious code. Source: ghsa-malware...

Malicious code in ddos-l7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0820d1cfcceb97e14d10335c631de12d5974fe1617474c94a09055a982607c8 The package ddos-l7 was found to contain malicious code. Source: ghsa-malware 35f98f327ff2e7b3a2558a70bc1b22fd31196c2c76b242645df4bd9c03e1e1ec Any...

Malicious code in stream-xor-chain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc5f6f6ecd6b8dc9aa3f0b220d7281e20d4cdb8d668fad3b2eaf3d574b5c1803 The package stream-xor-chain was found to contain malicious code. Source: ghsa-malware 5fa72b796385b0370be584212f5220a4a6e6960e840a4e700b2df2f99e7be1...

Malicious code in tdspt-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df7e9f891a48c1bea4bde6673484ff604dfe90e6e99972469417fbec69d0eac4 The package tdspt-helper was found to contain malicious code. Source: ghsa-malware b3fbe7c3c4241a699aa4e7bcd9abdaf9fdb9f37eb27d178e235db8f5ee4402a2 A...

PT-2025-48664

Name of the Vulnerable Software and Affected Versions gokey versions prior to 0.2.0 Description A flaw in the seed decryption logic caused passwords to be incorrectly derived using only a portion of the expected entropy when generating keys/secrets from a seed file. This resulted in potentially...

Malicious code in bitcoin-lib-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 480dbd7d7ec801a0212ee78ebb73268cd67ba4fb96b06ec563fbafe31aa10531 The package bitcoin-lib-js was found to contain malicious code. Source: ghsa-malware 95f79207062e8c5db317d3487c20f36927b99e9f0b9bfc2551c22a23d10c020f...

Malicious code in vite-dynachunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a15f2c558d50bf310cbbe09daac2730fcfe1f196c0f0a2184d5adc74d0ec749 The package vite-dynachunk was found to contain malicious code. Source: ghsa-malware 9402a1a80c09793a69e3dc45fab9bf9fb963616e70b8e50d3f46bd65a678c8b4...

Malicious code in ahmed_salem_t (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc278db8d9e1de9bc4e08bdc6bb126ee202e1f3035b69348d6f1ff66dd448e83 The package ahmedsalemt was found to contain malicious code. Source: ghsa-malware 2b2f4d2a3aa2f5b0a62127ad70f27d33c81f4d216a3fd4ff651f855cbb3b7f8e An...

MAL-2025-191464 Malicious code in mayhem-wma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d242ed0467287371909e2fef415c86d7688c77b9a33f6b43c52d37bfc2d7fa6e The package mayhem-wma was found to contain malicious code. Source: ghsa-malware 9f00d5cfad9006d0cb83e7249554304291a746a42a2191314e1b70990e854df5 Any...

Malicious code in rpc-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eca28ab1eabeac24c0ce55063ac151338d0255fcc2c8f74909566c8c3a3a8b1f The package rpc-validator was found to contain malicious code. Source: ghsa-malware 318ca2489ffa297599695ecb6b29c76c63bb61b59d5380b1092213774438e35d...

MAL-2025-191463 Malicious code in initial-path (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bdfbaf17e5ea42f67e6327f5dfe8766f8a5f8d83fb4b390fc8d780da5555187 The package initial-path was found to contain malicious code. Source: ghsa-malware 014c829694ccb06463ad706603727d070cbf38be1e103200b54c1235ccc82611 A...

MAL-2025-191342 Malicious code in @voiceflow/dependency-cruiser-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f310f0649a09ab3e8f8ca155d2067e1f39ad9ac40a987851fd0dd352ffc268fe The package @voiceflow/dependency-cruiser-config was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191210 Malicious code in @dev-blinq/ai-qa-logic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bcfefccc1ff9a7579321c6e45d16fc6aa94b9eaa45952fe47d415c2ffcde9a4 The package @dev-blinq/ai-qa-logic was found to contain malicious code. Source: ghsa-malware...