Malicious code in tailwindcss-fonts-bundler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 111ae70ed7d5ecb92401f00f8d9309b7cc99749c16a3ffab3b448b02b8224037 The package tailwindcss-fonts-bundler was found to contain malicious code. Source: ghsa-malware...

Malicious code in polygon-bitquery-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1d6daf4d1c0048da15a68fd80e8793122e363078d90c68f3d596760c5ca0156 The package polygon-bitquery-api was found to contain malicious code. Source: ghsa-malware...

Malicious code in turbo-json-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a239b53ed6cbc1e72aac660afa08204b9de36dae39068c30cf175ddd390b4fd1 The package turbo-json-parser was found to contain malicious code. Source: ghsa-malware...

Malicious code in tailwindcss-forms-componentes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0825512b6509f2725c98e651bd2d86e9fd2fa6e488f9ee33a7cdcfbf30b1a73e The package tailwindcss-forms-componentes was found to contain malicious code. Source: ghsa-malware...

Malicious code in typescript-constructors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 844c09a21118cd1492d232a90aba55fce7e45e4558fe560c47b8a8c347138b89 The package typescript-constructors was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1207 Malicious code in selfbot-lofy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef24f8180f463b198ff4fea466684c4439a31102aead233f8faa51b587ac0bb9 The package selfbot-lofy was found to contain malicious code. Source: ghsa-malware 1af8492fa4885fa5b969d5ef3947595dffa2f959bb4e1de73b9ca504dec215a8 A...

MAL-2026-1186 Malicious code in @powpegtest/powpeg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0acf5c813243b7a0b83c02048de4112604eb9ad97d612f3822206a0cfbf174ad The package @powpegtest/powpeg was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1183 Malicious code in rbxm-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b87d18b7d4851f9a309124729f8c9cb9810fa99757b2c29a7687dd312ff0ca3e The package rbxm-utils was found to contain malicious code. Source: ghsa-malware 6c08866f33d2e6e36b9f6b88853ad651ccd95613b0cd6af83c894936f8713ff3 Any...

Malicious code in eslint-verify-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccb32b4c1f03bbf9f4f077b2f13e3b8fc286024f93342e191528f54b2d54107a The package eslint-verify-plugin was found to contain malicious code. Source: ghsa-malware...

Malicious code in @global-dax-ad-platform/dax-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 465668b4ba6f4c109320a3407a4db8d254d21a7f43af75ca5f8c1873c12c7f46 The package @global-dax-ad-platform/dax-types was found to contain malicious code. Source: ghsa-malware...

Malicious code in @zakhaevv/envai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd4de2673a9f50b205b51474085ef3eb3e78f06618873183038582fb48bacfe The package @zakhaevv/envai was found to contain malicious code. Source: ghsa-malware 12157c0eeb0adb6f316ee9f171691ae08e204ec84f3ad7dabf9213e2af244b7...

MAL-2026-1177 Malicious code in graph-dynamic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fc9e411d29d7d359cf81fe3140dc3cee9d1583e20ad8bbf32ca9fb9e6e09860 The package graph-dynamic was found to contain malicious code. Source: ghsa-malware 2662ddb0770767495266ae6388242dbeb6fd0dfde8015252228968e4d28e1ad1...

Malicious code in openclaw-droid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f44b4e03b9d39603b2f92afff328117f480b35edd9fa3b64b40d6175b3432906 The package openclaw-droid was found to contain malicious code. Source: ghsa-malware a9462b166b838e565ac3aeb11533c69cb1168a95efc54468c0ed81628d080281...

MAL-2026-1157 Malicious code in token-discord-encryptation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38c8f046fd4903192eb3de371ca4df10734635758b721d7cf2827f9df6f84f0d The package token-discord-encryptation was found to contain malicious code. Source: ghsa-malware...

Malicious code in rullzdigital-libsignal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bfc2bce31260b9826f9f3040d958f28d0229e8db4f0d7bec9bd9404f86fc5a4 The package rullzdigital-libsignal was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1153 Malicious code in primexuu-libsignal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d19a97909d609a0587fbdd272664419fbfe8f92f5a43e492cf83cb34496296d4 The package primexuu-libsignal was found to contain malicious code. Source: ghsa-malware...

Malicious code in xpack-video-submission (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7775173f0b8d7a6612c5a88940a5e371896db6f065c1b7c94bf87b2fcb6f51a1 The package xpack-video-submission was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1158 Malicious code in xpack-arc-gateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 511c9b6f2c89a51bfa23febfa505e5ce2696cd6ae695ee0a7b057e194f10ca2b The package xpack-arc-gateway was found to contain malicious code. Source: ghsa-malware...

Malicious code in xpack-test-3.0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4fcebf35e85158afa53ce21da1265a4c3acac20914c4c76285d9043ac3a2d62 The package xpack-test-3.0 was found to contain malicious code. Source: ghsa-malware 825d559cd29d6d2efd0f89583e84f31a7b471bfbc3376252e71872d8f9863d87...

Malicious code in xpack-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62edc6bb089c839e93cf7b71b8b46ca1f5d064272cac586b49cda41fc40b1c19 The package xpack-subscription was found to contain malicious code. Source: ghsa-malware...