MAL-2026-1212 Malicious code in tailwindcss-forms-componentes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0825512b6509f2725c98e651bd2d86e9fd2fa6e488f9ee33a7cdcfbf30b1a73e The package tailwindcss-forms-componentes was found to contain malicious code. Source: ghsa-malware...

Malicious code in @twilio-client/twilio-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d655ae7b2eb263b5d3c630c72182a60a7012272acc57f1816eb73fd1c9119a97 The package @twilio-client/twilio-client was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1104 Malicious code in bubble-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bac16503e5a840ccf7e88977f38fac02affaa1c8eaff7f449b9832fa03cbd0a8 The package bubble-core was found to contain malicious code. Source: ghsa-malware a4122cb6b21018902fe682cf3dd31246d52f8850e8116649894d89df6f06acb2 An...

MAL-2026-1107 Malicious code in formmiderable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a421f6bd77d5bfcd4d08aaedcffd8b55c430c85084ccce52372a6700eaac6d50 The package formmiderable was found to contain malicious code. Source: ghsa-malware 5d9ce26e5d5c2d433753869317d12725c4dfdb05728a86f4acf96b75f8d16d50...

Malicious code in json-mapping-srcs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a4791659c68903f36ecfbf9da2e8af6dacdb98a4a525d5f104d43b07260cca The package json-mapping-srcs was found to contain malicious code. Source: ghsa-malware...

Malicious code in express-soaps (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11b77454b492585237ca44534f8c75ca1428979238d5badb6e7f86f99ec9d88a The package express-soaps was found to contain malicious code. Source: ghsa-malware cd65d37fecf812cffa4141b215b29a24bf83aa9b1052aba67c566690e710a0c2...

Malicious code in detect-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f7bb76ced9a07af5292a6e90596305f844da2d89fc98329431d360797c4b1d4 The package detect-cache was found to contain malicious code. Source: ghsa-malware 136a28b5b046aa8efe7f9f0084f8f700650cdca446449494ec58b8414886f0a0 A...

Malicious code in osopackage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81f944909c442d3ce5de69ca15e63f1dc9aac8408cd2d3875794fde6ac0c4efd The package osopackage was found to contain malicious code. Source: ghsa-malware ea6582943b363713bda63ec879242935fe1a5f5efa7be40fbb87173570f642a0 Any...

MAL-2026-794 Malicious code in @meli-lint/eslint-config-tests-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 132488198f2cf5f0c73a4f6dd4d766162d9ef2bae156055d07c84b60e3e7b26d The package @meli-lint/eslint-config-tests-jest was found to contain malicious code. Source: ghsa-malware...

MAL-2026-746 Malicious code in react-count-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bf23710693921f6b69d38cf0abd8fa7ce2f181bfa2df9fa9777f59e0e4954e7 The package react-count-sync was found to contain malicious code. Source: ghsa-malware 9a44b72820f2af0bcbd60f65787e0707617e4f7428aa2c9407bec9f8decb07...

Malicious code in confluence-analytics-support (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ce55572584393fb9c1af657085c599ab0f699fd5bf4bfbcda2a47560c6a717c The package confluence-analytics-support was found to contain malicious code. Source: ghsa-malware...

Malicious code in eslint-config-stitch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3747d49c7b72e1659dde0b66b3e7b95bd198fc6a8f8f37d9a7a1bc2fc76dd54 The package eslint-config-stitch was found to contain malicious code. Source: ghsa-malware...

Malicious code in react-responsive-carousel-v4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 544d7ca19589218beb2b384a9e4e1ce7f64b130015ea62978f81adc7c6be5934 The package react-responsive-carousel-v4 was found to contain malicious code. Source: ghsa-malware...

MAL-2026-589 Malicious code in dotenv-embed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bbecb8b9bb96fcd71af0764df5106d8163ccb94c21960bf858383ab85d10308 The package dotenv-embed was found to contain malicious code. Source: ghsa-malware eb5a7942b654b4da1fb16e67f19ca82b3b52c4fcce4db85e9d5596571651c6b7 A...

MAL-2026-487 Malicious code in ntwsc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101f5ffdce019ee61ce0775bc9de5dba96de50e5e03e8fd70ac1b30b28cf13e0 The package ntwsc was found to contain malicious code. Source: ghsa-malware ef0dd5d822ddc7c0a00339f31b43d1a99cf79532857cdd157bf1eeb4b2a31ea2 Any...

Malicious code in aws-crt-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82067e17b63298c1e09a6b616010b7a8ebf7f607510795f98428f8e5305994ab The package aws-crt-nodejs was found to contain malicious code. Source: ghsa-malware 40ddba391f5ca6a4fa75fe5e5440dfd1f57833b391d8db3c2e5918aef284a294...

MAL-2026-432 Malicious code in universal-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd5b2c6fa041d1cac8de4366ee4973b7748dd0ef711771280413bd57d4318175 The package universal-provider was found to contain malicious code. Source: ghsa-malware...

Malicious code in @joaoxxx/internallib-v325 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f9c573db1b523cb0082a05f37710f4084f5ed28324fbe23186a7ebf9a0a082d The package @joaoxxx/internallib-v325 was found to contain malicious code. Source: ghsa-malware...

Malicious code in charlie_charlie_kirky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8676a174ab443e579c1cc2fca8d746c79ad03dc66ff6a09c5f4f4b73af2ccd8d The package charliecharliekirky was found to contain malicious code. Source: ghsa-malware...

MAL-2026-395 Malicious code in natateste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 223884e033273ef49ab45ba4ac8c051419acbd5c7613c862e86fea2a817d5226 The package natateste was found to contain malicious code. Source: ghsa-malware b2bc57aed3208a3a97a2ed539e0782979641ab8312a75dcdb5056540c564d870 Any...