MAL-2025-191289 Malicious code in @posthog/bitbucket-release-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cd4323384e4b29aac2ac56b7eea22bbaafb8579a013ff55f7d7b26f0c972a0a The package @posthog/bitbucket-release-tracker was found to contain malicious code. Source: google-open-source-security...

MAL-2025-191388 Malicious code in @vucod/email (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e91b5731b235151065b43287967fa368625822413bb181076f044b34a155d0c5 The package @vucod/email was found to contain malicious code. Source: google-open-source-security...

MAL-2025-191288 Malicious code in @pergel/nuxt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 254d004d3481a4de85486f384ce71966afc1887442207235accfc350ceab39cc The package @pergel/nuxt was found to contain malicious code. Source: google-open-source-security...

MAL-2025-191211 Malicious code in @dev-blinq/blinqioclient (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3a1d417e283165e25dc75c9510f4bcdde80854ca5600090b4de220548e72ae1 The package @dev-blinq/blinqioclient was found to contain malicious code. Source: google-open-source-security...

MAL-2025-191320 Malicious code in @silgi/yoga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c8aabbdab5840682c4f335a1ae8ff93ff305af445e00bacb5f10b1fd85b7ba1 The package @silgi/yoga was found to contain malicious code. Source: google-open-source-security...

MAL-2025-191257 Malicious code in @oku-ui/dismissable-layer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e3f3fce07b25fef3b52f9f9cccfdaa44fd55e8721c6d7c287e1fbd9379359f0 The package @oku-ui/dismissable-layer was found to contain malicious code. Source: google-open-source-security...

MAL-2025-191210 Malicious code in @dev-blinq/ai-qa-logic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bcfefccc1ff9a7579321c6e45d16fc6aa94b9eaa45952fe47d415c2ffcde9a4 The package @dev-blinq/ai-qa-logic was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191362 Malicious code in @voiceflow/npm-package-json-lint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcb13f449b9f8582e57b2b30103359ccd3efcbde9b172f827a481af246122211 The package @voiceflow/npm-package-json-lint-config was found to contain malicious code. Source: google-open-source-security...

MAL-2025-191283 Malicious code in @oku-ui/visually-hidden (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6afc6b62de3f9d4eaa542710c9970ee10c57ab88477a9d0579decd308f5c1ad The package @oku-ui/visually-hidden was found to contain malicious code. Source: google-open-source-security...

MAL-2025-191188 Malicious code in @antstackio/express-graphql-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13ae25cf8547b5efb95597b0e90ea4105e03417563ff724dd9c720c49b4c52d2 The package @antstackio/express-graphql-proxy was found to contain malicious code. Source: google-open-source-security...

MAL-2025-191249 Malicious code in @oku-ui/arrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 085e9cbdb891d5b550a81a42584b1cdd8ab001a9443b162158aa633ce18b1e06 The package @oku-ui/arrow was found to contain malicious code. Source: google-open-source-security...

Malicious code in ra-auth-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ddebb70a73861543e5a68b94eb70a9b3e2fa3726a977ef776f8ef3fc75f0e76 The package ra-auth-firebase was found to contain malicious code. Source: ghsa-malware d4c20e629d2ccf83a4cc1a771392c0f879de71df77471d5e822fc511e415cb...

MAL-2025-191192 Malicious code in @bdkinc/knex-ibmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85cc012fb765319451923141ad4b7e0436b8033482b80dfd67bcc460923c2ae0 The package @bdkinc/knex-ibmi was found to contain malicious code. Source: ghsa-malware...

Malicious code in @alexadark/reusable-functions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40b60eadf9a59b630bca0ffcb8e9f5cec6b410c01cd856384df7caaff08880f9 The package @alexadark/reusable-functions was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191181 Malicious code in @alexadark/amadeus-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77dd4490e1bb80e5b23c2e2181146133e356e9a42967ae02883630c49378fb26 The package @alexadark/amadeus-api was found to contain malicious code. Source: ghsa-malware...

Malicious code in @accordproject/concerto-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d208898af793502494e9b8d4eaa5f6964e2ff49ff7fd50ca8dff9e9e40191313 The package @accordproject/concerto-types was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191174 Malicious code in @accordproject/concerto-metamodel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1581131b6f7d752a2f26c167db5c144e33b737febc23f3e156f76a1b68e763ae The package @accordproject/concerto-metamodel was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191173 Malicious code in @accordproject/concerto-linter-default-ruleset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9f48c313afcaf0a201a7b16889d968e2694c7e3751cc334b257de8f8084d9df The package @accordproject/concerto-linter-default-ruleset was found to contain malicious code. Source: ghsa-malware...

Malicious code in @accordproject/concerto-analysis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd4dfaf2dbfd72597ed98e94903934d34e97ddd5dc4f7aeb7f5450767cb3a34c The package @accordproject/concerto-analysis was found to contain malicious code. Source: ghsa-malware...

Malicious code in @browserbasehq/stagehand-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba1d760d2f3ab2322b527554b05f55f9d8ceb73868da963ea4d060a1a5a5134f The package @browserbasehq/stagehand-docs was found to contain malicious code. Source: ghsa-malware...