Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

MAL-2025-190930 Malicious code in @ensdomains/durin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7dcacde55c5201c366d199c830f210e3b126c9d1569c7c9a169bf40f8a3e13f The package @ensdomains/durin was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190886 Malicious code in @posthog/nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79eae844852de94f0a7cd6826f344e60fe40945cdacfaa3d3d589c965ade4ad1 The package @posthog/nextjs was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190927 Malicious code in web-types-lit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a949be18eda53349645226baa05c49f057d118e0343aee348fe75d0dde61dd The package web-types-lit was found to contain malicious code. Source: ghsa-malware 33c93b24ea8e92f97d8d57123f682db8c606b6c469b013baa1015b99a6de9ee1...

MAL-2025-190890 Malicious code in @posthog/react-rrweb-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7639d9bf4c377c1cb1bd2839d92cdc3ebdab0abb25b93f6b79914fc02634c2b4 The package @posthog/react-rrweb-player was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190899 Malicious code in @posthog/web-dev-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d8d0531931bec7f4add3b4f255b7f6572d28ff3edf2774f7d076fde394eb405 The package @posthog/web-dev-server was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190867 Malicious code in @mcp-use/cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d5826632c7194cdf9ed00c672477f5c1c8a250a107013f1edc0b803d948e471 The package @mcp-use/cli was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190907 Malicious code in @postman/postman-collection-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64948ce72be9099e788f3fd4ab6f5a1a67d0012429ae4e198bc7baa85a5197dd The package @postman/postman-collection-fork was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190868 Malicious code in @mcp-use/inspector (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 062fd62b0f62dafc3c8ee95640853f3b8b82191ac8ed44df47b0f944e514ebc5 The package @mcp-use/inspector was found to contain malicious code. Source: google-open-source-security...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...