Malicious code in @posthog/rrweb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e7ff62f7afccd552b5eff3833fa122ace1a2f8ef6447e4b372673896063098f The package @posthog/rrweb was found to contain malicious code. Source: ghsa-malware 8278c73c0fa29817d8923864303d2e24c5a7bd038a9f8a2cae587329a3837cab...

Malicious code in zapier-platform-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91585e373be96645e987946f96de5673a2cae4dec8eabdba368acad43399eb55 The package zapier-platform-cli was found to contain malicious code. Source: ghsa-malware...

Malicious code in @asyncapi/generator-helpers (npm)

@asyncapi/generator-helpers version 1.1.1 was published as part of the "Miasma RAT" software supply-chain attack campaign identifier "miasma-train-p1" that compromised several widely used @asyncapi npm packages on 2026-07-14. The malicious code was injected using whitespace hiding: it is appended...

MAL-2025-190657 Malicious code in @asyncapi/generator-helpers (npm)

@asyncapi/generator-helpers version 1.1.1 was published as part of the "Miasma RAT" software supply-chain attack campaign identifier "miasma-train-p1" that compromised several widely used @asyncapi npm packages on 2026-07-14. The malicious code was injected using whitespace hiding: it is appended...

MAL-2025-190656 Malicious code in @asyncapi/generator-components (npm)

@asyncapi/generator-components version 0.7.1 was published as part of the "Miasma RAT" software supply-chain attack campaign identifier "miasma-train-p1" that compromised several widely used @asyncapi npm packages on 2026-07-14. The malicious code was injected using whitespace hiding: it is...

Malicious code in @asyncapi/generator-components (npm)

@asyncapi/generator-components version 0.7.1 was published as part of the "Miasma RAT" software supply-chain attack campaign identifier "miasma-train-p1" that compromised several widely used @asyncapi npm packages on 2026-07-14. The malicious code was injected using whitespace hiding: it is...

Malicious code in @postman/aether-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf4244dc3aeb4aeef61e6a25bf53dd406e67c8b3d33f710a91934f64a631ae69 The package @postman/aether-icons was found to contain malicious code. Source: ghsa-malware...

Malicious code in redux-forge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ab662afde2ebe0d7c2a8537b2bdab8226b61daf75ff4e54ad51bf5bb7eee8eb The package redux-forge was found to contain malicious code. Source: ghsa-malware f80cb61ec8f9b4f1ee385b40c40e1816cb61a012074ddc792d16f433c6a32294 An...

MAL-2025-190660 Malicious code in @asyncapi/modelina-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3144264289038cf791432dc902acf2aafe218ea12a11fd986f2690b63531157 The package @asyncapi/modelina-cli was found to contain malicious code. Source: ghsa-malware...

Malicious code in @asyncapi/modelina-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3144264289038cf791432dc902acf2aafe218ea12a11fd986f2690b63531157 The package @asyncapi/modelina-cli was found to contain malicious code. Source: ghsa-malware...

Malicious code in @asyncapi/optimizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 886928a124b656faf40d1490a3b484cf0aa717d98fa9f5cd6de025e1874183e5 The package @asyncapi/optimizer was found to contain malicious code. Source: ghsa-malware...

Malicious code in @asyncapi/cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45b13eec1644f2d38922b7e61732a64ae6ee0d71810232ff15c95a3290de465d The package @asyncapi/cli was found to contain malicious code. Source: ghsa-malware 99e5bdb2a7d429f7e01403c432963826b244c3bed02a5a877ace1307b5fee3ad...

Malicious code in @asyncapi/diff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa55a72fa4b01b54926fbef60ac9ac0ece6a9128ddbdd3d883aa6ee7bb8c67c The package @asyncapi/diff was found to contain malicious code. Source: ghsa-malware dfe913f8a298c7c2e8e2e4708025a868cba9d567779195881f90ba52bdc8d14c...

MAL-2025-190651 Malicious code in @alaan/s2s-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e50bdec2a61138175bbd86f2b001903eb76400352b9bef5e55afcd6610fbbafa The package @alaan/s2s-auth was found to contain malicious code. Source: ghsa-malware f48811a0a401773ab205d7ce2a4ce4d1890a0ed23b75a75cd45e5140c702c99...

Malicious code in @asyncapi/html-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3514238d2df6a1ffca5fe310bff1d740b15544943cdf2e67ccf90e2e05acee0c The package @asyncapi/html-template was found to contain malicious code. Source: ghsa-malware...

Malicious code in @asyncapi/bundler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4772ec7022abe0375835d594a76a518350868bfe4630f4cf472962d4e6bdf2a9 The package @asyncapi/bundler was found to contain malicious code. Source: ghsa-malware...

Malicious code in @asyncapi/nunjucks-filters (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51137a75fbced2a0515e71df0b97baf386e784c2eb5134c77ed77afdcb48fe34 The package @asyncapi/nunjucks-filters was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190694 Malicious code in crypto-addr-codec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 900adb7a0d7713cca5ccdc793971f3489553656e4e132b80293ad56c55d05b2a The package crypto-addr-codec was found to contain malicious code. Source: ghsa-malware...

Malicious code in crypto-addr-codec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 900adb7a0d7713cca5ccdc793971f3489553656e4e132b80293ad56c55d05b2a The package crypto-addr-codec was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190666 Malicious code in @ensdomains/content-hash (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39aeb9f2a2d9a8ee1c57695456c8af6657d069eaee694ef7f8c128bb292bfabd The package @ensdomains/content-hash was found to contain malicious code. Source: ghsa-malware...