Malicious code in supply_chain_dummy_test_3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1963b5503ceeb0e8ed806c386f27edc1761eab24549419a8911a00f525b4a4c The package supplychaindummytest3 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192763 Malicious code in supply_chain_dummy_test_4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44714fb556ca073c6056617d8f13043c9fc07b19dd6b1c6599b62dc183c87a45 The package supplychaindummytest4 was found to contain malicious code. Source: ghsa-malware...

Malicious code in supply_chain_dummy_test_1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 427c02751dbaf2ec96a9818919ef225ce09a1017b33a494163746cce09acbad2 The package supplychaindummytest1 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192760 Malicious code in supply_chain_dummy_test_1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 427c02751dbaf2ec96a9818919ef225ce09a1017b33a494163746cce09acbad2 The package supplychaindummytest1 was found to contain malicious code. Source: ghsa-malware...

LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs

Summary A serialization injection vulnerability exists in LangChain's dumps and dumpd functions. The functions do not escape dictionaries with 'lc' keys when serializing free-form dictionaries. The 'lc' key is used internally by LangChain to mark serialized objects. When user-controlled data...

MAL-2025-192755 Malicious code in dotjsenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 199e0e242516cf235f3d4f4d7b7921f7b52573e674bd76da515939782a81c153 The package dotjsenv was found to contain malicious code. Source: ghsa-malware b4dd239728dde802ec7a7aadd85d2a9f1c5c3e8b83e5f19b92a2afab16d1cd1c Any...

MAL-2025-192764 Malicious code in trial-guard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16f74d3903fd133c053441c95d9b7a755cbaf7c69050b9a883a2162e3e7b0dfc The package trial-guard was found to contain malicious code. Source: ghsa-malware 3106ed572562306cb0caa1d2219da59b90053db9127323b84442fa2c119d4c05 An...

Malicious code in trial-guard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16f74d3903fd133c053441c95d9b7a755cbaf7c69050b9a883a2162e3e7b0dfc The package trial-guard was found to contain malicious code. Source: ghsa-malware 3106ed572562306cb0caa1d2219da59b90053db9127323b84442fa2c119d4c05 An...

Malicious code in start-log-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea5bc70fc220a38dd997887f438e9a6d5afb70cf1d30dd8b95a664e013a7309e The package start-log-plugin was found to contain malicious code. Source: ghsa-malware 3ef7e02e352e8d339add82817454f490a0e4588fffb1dcafa53cc0136f4e9d...

MAL-2025-192757 Malicious code in qxytest1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0505d10da1308ac438dd0f500c125f12d4256deda46cca7991289eee22897d53 The package qxytest1 was found to contain malicious code. Source: ghsa-malware a5c4713032b22949ba57f3363cbced03d097646105ff09ef45dec3b09d552cae Any...

MAL-2025-192758 Malicious code in start-log-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 209207b530cc6132d223aef076b74b150c66f7ccdfb2672191a14dee02307daa The package start-log-backend was found to contain malicious code. Source: ghsa-malware...

Malicious code in start-log-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 209207b530cc6132d223aef076b74b150c66f7ccdfb2672191a14dee02307daa The package start-log-backend was found to contain malicious code. Source: ghsa-malware...

Malicious code in qxytest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce8a49d4366751e26ed3fc66c1a478073c6d45eb5c8b92975a4827491e8ab108 The package qxytest was found to contain malicious code. Source: ghsa-malware f6079d7fcf20fd88c7195d9f4b2e7f2fcde1e43e6783075abae2b7450da08cfe Any...

MAL-2025-192759 Malicious code in start-log-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea5bc70fc220a38dd997887f438e9a6d5afb70cf1d30dd8b95a664e013a7309e The package start-log-plugin was found to contain malicious code. Source: ghsa-malware 3ef7e02e352e8d339add82817454f490a0e4588fffb1dcafa53cc0136f4e9d...

MAL-2025-192756 Malicious code in qxytest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce8a49d4366751e26ed3fc66c1a478073c6d45eb5c8b92975a4827491e8ab108 The package qxytest was found to contain malicious code. Source: ghsa-malware f6079d7fcf20fd88c7195d9f4b2e7f2fcde1e43e6783075abae2b7450da08cfe Any...

MAL-2025-192754 Malicious code in chai-max (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bf9b30832b678dc77fdae0e722638e2a3ff7ba5cf07b09960233418192dd073 The package chai-max was found to contain malicious code. Source: ghsa-malware a6e46cc56f071a0c9f8afeaa19cf981997f743503c55a5e155fd1c99bf53d3a4 Any...

Malicious code in chai-max (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bf9b30832b678dc77fdae0e722638e2a3ff7ba5cf07b09960233418192dd073 The package chai-max was found to contain malicious code. Source: ghsa-malware a6e46cc56f071a0c9f8afeaa19cf981997f743503c55a5e155fd1c99bf53d3a4 Any...

Malicious code in chai-async-chains (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dfd7db9210fae054def8abcb6989e1158a4774dbec18c08ac6eebcbf95ef753 The package chai-async-chains was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192753 Malicious code in chai-async-chains (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dfd7db9210fae054def8abcb6989e1158a4774dbec18c08ac6eebcbf95ef753 The package chai-async-chains was found to contain malicious code. Source: ghsa-malware...

Malicious code in excluder-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fbd667834f24295390990aca17b0c31962c9bb73f4db2d623c731d5bea052ca The package excluder-mcp was found to contain malicious code. Source: ghsa-malware 442683f846ae1a5ed8b7212f648fa722d3fc7f0e82af81258c74731d441e7b30 A...