MAL-2026-94 Malicious code in shopify-perf-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b8ab5bcfbfadc319f33cd1364bdbef1f7517fe3c502f9617bc77391014296a2 The package shopify-perf-kit was found to contain malicious code. Source: ghsa-malware b815f7df6ccc90c9082b80e772505706c55a58e7e187d18b01ff56e6524e57...

MAL-2026-90 Malicious code in matic-transfer-consumer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2bf4eeb30140d673f8136ab4039e9f3bcc3f3b7d7482e96260a2806bf890eef The package matic-transfer-consumer was found to contain malicious code. Source: ghsa-malware...

MAL-2026-91 Malicious code in okta-auth-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0d2189b5df6091ef38c2619c0ed24b8814459b769da6b646901bb0d1987a440 The package okta-auth-js was found to contain malicious code. Source: ghsa-malware 65d7548ce9f766315a32892d8f9588740b8fab7cc50443598ea65e8e0ce9b2ab A...

Malicious code in electra-web-player-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45f583354472166aa4f724b9fde7ec74f8d56151edda6123bceaa5ac3560dab2 The package electra-web-player-event was found to contain malicious code. Source: ghsa-malware...

MAL-2026-89 Malicious code in importmap-polyfil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2d874c3ab0f1a1f131dca5c54020df385d3d3a2d8a58490de33ab3ebe3cf797 The package importmap-polyfil was found to contain malicious code. Source: ghsa-malware...

Malicious code in importmap-polyfil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2d874c3ab0f1a1f131dca5c54020df385d3d3a2d8a58490de33ab3ebe3cf797 The package importmap-polyfil was found to contain malicious code. Source: ghsa-malware...

Malicious code in matic-transfer-consumer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2bf4eeb30140d673f8136ab4039e9f3bcc3f3b7d7482e96260a2806bf890eef The package matic-transfer-consumer was found to contain malicious code. Source: ghsa-malware...

Malicious code in okta-signin-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1968f15d4faab74927023ad015e009d98087c120d8cb31b4a754faff297219b7 The package okta-signin-widget was found to contain malicious code. Source: ghsa-malware...

MAL-2026-87 Malicious code in electra-web-player-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45f583354472166aa4f724b9fde7ec74f8d56151edda6123bceaa5ac3560dab2 The package electra-web-player-event was found to contain malicious code. Source: ghsa-malware...

MAL-2026-77 Malicious code in polymarket-clob (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e650fcd9e5cec151122c4e59ee9f829a9f8f3afbc998be35354879cd24f5d8bf The package polymarket-clob was found to contain malicious code. Source: ghsa-malware c6f2692198b832546ebc0a47e287ea8e976cbbacae0f1963545cb4610ddd08b...

MAL-2026-75 Malicious code in ethos2.0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a012a962472733bf307c16dd1dfe1806727190273d53ac57bf4b524a26d34c96 The package ethos2.0 was found to contain malicious code. Source: ghsa-malware b646ddc4b3047452eaaf5304b21effbc2f0dd9800fd136ebfb4d33936f3bd8e6 Any...

Malicious code in ethos2.0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a012a962472733bf307c16dd1dfe1806727190273d53ac57bf4b524a26d34c96 The package ethos2.0 was found to contain malicious code. Source: ghsa-malware b646ddc4b3047452eaaf5304b21effbc2f0dd9800fd136ebfb4d33936f3bd8e6 Any...

Malicious code in seanp-test-package-do-not-use2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99e839ce8a19ba7b81bda65289233cd34aa7bc4daba6d742f102288bbc5e514d The package seanp-test-package-do-not-use2 was found to contain malicious code. Source: ghsa-malware...

MAL-2026-82 Malicious code in wikibuy-mobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95afdd748611bc8b6c2cd619ad873d1ff6d1928786e10d4429487e819c9f8af1 The package wikibuy-mobile was found to contain malicious code. Source: ghsa-malware 0040ed4ba77f055d03cc31ab35b4079ff949423ed02d430037158aed38edfb02...

Malicious code in bignumber.js-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92c6e02327f14620207af4a5e1925c400b63593f1200b4741e6da6fbed98324b The package bignumber.js-new was found to contain malicious code. Source: ghsa-malware 28010a58702c96fe7985f5d14aa8012e5f51e93f658c9de605cbd3e7437e18...

Malicious code in wikibuy-mobile-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e240a0c7b0f1e6f0ce72c097409a543c14de0b3231f000ef7d37c8d61b0e1ad8 The package wikibuy-mobile-analytics was found to contain malicious code. Source: ghsa-malware...

Malicious code in cp_amm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e71dacd7a89bbff73298cd870eab40b71d5fdf8a2ffbec74c772cbc4e6f1026 The package cpamm was found to contain malicious code. Source: ghsa-malware c2bf6dfc9b717408c1e17976ef3ecb5193dd73340f2d3a60f85d114b24c81c4e Any...

Malicious code in smartspacestoreapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 131fda466c1132087962cfaaecf0a2f836548024dd31f9f0982764d87534c931 The package smartspacestoreapp was found to contain malicious code. Source: ghsa-malware...

MAL-2026-79 Malicious code in seanp-test-package-do-not-use2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99e839ce8a19ba7b81bda65289233cd34aa7bc4daba6d742f102288bbc5e514d The package seanp-test-package-do-not-use2 was found to contain malicious code. Source: ghsa-malware...

MAL-2026-83 Malicious code in wikibuy-mobile-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e240a0c7b0f1e6f0ce72c097409a543c14de0b3231f000ef7d37c8d61b0e1ad8 The package wikibuy-mobile-analytics was found to contain malicious code. Source: ghsa-malware...