MAL-2025-191245 Malicious code in @lui-ui/lui-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59b88c15ab970fa80e2c420db246728871b310f27e35371206322bf8cea6abb1 The package @lui-ui/lui-vue was found to contain malicious code. Source: ghsa-malware 339d88eca55085f7dbfd769a5800adf59a499c0e6e14500a6f456cf17ec249f...

Malicious code in solomon-v3-ui-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc1913e7f746026b2bdfcb099e4e6cc55dd56a41c2a5cf50bfc9e9ce075b75e The package solomon-v3-ui-wrapper was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199256

Malicious code in solomon-v3-ui-wrapper npm...

EUVD-2025-199106

Malicious code in @oku-ui/use-composable npm...

Malicious code in @oku-ui/use-composable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cab65a88d661d76b82f009862721ca4892e3243b91a6ac493c1f09613cf76955 The package @oku-ui/use-composable was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199109

Malicious code in @oku-ui/slot npm...

Malicious code in @oku-ui/slot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c00107e442d452bcb43403d89ade38e4fb111f1d1624b2dc4d2498df1f9a6ca2 The package @oku-ui/slot was found to contain malicious code. Source: ghsa-malware 2a90589b3706323fe3b284df0f3935425b573427c0e51600a8c59a2fc69a670d A...

EUVD-2025-199110

Malicious code in @oku-ui/primitives npm...

Malicious code in @oku-ui/primitives (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48684386017546a6d1cc3afd6317d995fe7edc730db2789b79af9135d8f88191 The package @oku-ui/primitives was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199111

Malicious code in @oku-ui/motion npm...

MAL-2025-191040 Malicious code in @oku-ui/motion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e93c9480f3e0eb944aabc540b3632ec18584ccd90aa5a041c10a5f5b7b2a37a The package @oku-ui/motion was found to contain malicious code. Source: ghsa-malware 8b014f6399b1aca00d79587642fc63ab15d16cb1a2ab7f0bd541da45664d891a...

EUVD-2025-199112

Malicious code in @oku-ui/label npm...

MAL-2025-191039 Malicious code in @oku-ui/label (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26f863ed3157086df61430a6d4939470a4c8cbf6bca6ae11d98f34c0c2547e45 The package @oku-ui/label was found to contain malicious code. Source: ghsa-malware d98465139dc808cd01653e8f2eab11a773fcb7ce4d9e4a339cf0bb8c07c02320...

Malicious code in @oku-ui/label (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26f863ed3157086df61430a6d4939470a4c8cbf6bca6ae11d98f34c0c2547e45 The package @oku-ui/label was found to contain malicious code. Source: ghsa-malware d98465139dc808cd01653e8f2eab11a773fcb7ce4d9e4a339cf0bb8c07c02320...

EUVD-2025-199113

Malicious code in @oku-ui/focus-scope npm...

EUVD-2025-199122

Malicious code in @oku-ui/accordion npm...

MAL-2025-191037 Malicious code in @oku-ui/accordion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec6f4c235626fe3582ef43941e8a0317b4c3b66acee5e40dae2d246214db38e9 The package @oku-ui/accordion was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190902 Malicious code in @postman/mcp-ui-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63316f530f87ac69078cc5b93dfdbc1a58d62f1f37a663f8bf40cb5489f4defc The package @postman/mcp-ui-client was found to contain malicious code. Source: google-open-source-security...

Malicious code in @postman/mcp-ui-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63316f530f87ac69078cc5b93dfdbc1a58d62f1f37a663f8bf40cb5489f4defc The package @postman/mcp-ui-client was found to contain malicious code. Source: google-open-source-security...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...