MAL-2025-190727 Malicious code in @ensdomains/dnsprovejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cba062a1b19731497546d926af22ae0964962df93fc3bd059d0e66df0fd41521 The package @ensdomains/dnsprovejs was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190736 Malicious code in @ensdomains/reverse-records (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e16814335619e8655b02ca0583e019d232eb4f008db3e99d25f3ad1eb3d18c The package @ensdomains/reverse-records was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190723 Malicious code in @ensdomains/ccip-read-dns-gateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ddc155befe014da7ce46a7c122655187ecfb495a9af39726b73de5be9ad4f8c The package @ensdomains/ccip-read-dns-gateway was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190668 Malicious code in @orbitgtbelgium/mapbox-gl-draw-scale-rotate-mode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e4c029f895b6e2e59e54d01b72927b97daa87a560816829220a1b62775221ae The package @orbitgtbelgium/mapbox-gl-draw-scale-rotate-mode was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190667 Malicious code in @ensdomains/eth-ens-namehash (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0009bf3870d33e9e174ce53fe0a281b43402e1f8b78f62e6cd296ad8f082588 The package @ensdomains/eth-ens-namehash was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190699 Malicious code in react-element-prompt-inspector (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58c142c9370bed76cfd7eb230462162a911d50057bbbc351f019dae4a8208784 The package react-element-prompt-inspector was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190684 Malicious code in @trigo/eslint-config-trigo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f323ad76d021234c96924ded9095572d18be962e0c71fb9cfbeb1fa43079e961 The package @trigo/eslint-config-trigo was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190690 Malicious code in @trigo/trigo-hapijs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c7e81e80711c8a06b45fdcf920330f28c7da02f8080f179ee1161717bdc2a78 The package @trigo/trigo-hapijs was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190686 Malicious code in @trigo/jsdt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff5aae2e5762514a4d2a304a2ceb36d9b895c8bd88c9a6303752aea4b078119f The package @trigo/jsdt was found to contain malicious code. Source: ghsa-malware 91f1b0ba55c42b887eade435580838bef529a7fe7a9b9fd8b3cd05ada0528cc7 An...

MAL-2025-190680 Malicious code in @trigo/atrix-orientdb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dff5fee3398c42159c86cf250a0b25cae13f5e94b812aa6ef984b8fa8b4bd543 The package @trigo/atrix-orientdb was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190679 Malicious code in @trigo/atrix-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8faf4ce8a59f1dddea70c86855597a55d78518cc7f1c98ae103c8be6559acf5c The package @trigo/atrix-mongoose was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190692 Malicious code in atrix-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc27b71b0a6bedd292b899cd2cafaae36c887c103fbebc76f31189538787ffc The package atrix-mongoose was found to contain malicious code. Source: ghsa-malware a7b1ca5c62f87d30469e55f9e277026bdbedad7e3060cea2e2a80f20a87dc438...

MAL-2025-190673 Malicious code in @posthog/rrweb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e7ff62f7afccd552b5eff3833fa122ace1a2f8ef6447e4b372673896063098f The package @posthog/rrweb was found to contain malicious code. Source: ghsa-malware 8278c73c0fa29817d8923864303d2e24c5a7bd038a9f8a2cae587329a3837cab...

MAL-2025-190666 Malicious code in @ensdomains/content-hash (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39aeb9f2a2d9a8ee1c57695456c8af6657d069eaee694ef7f8c128bb292bfabd The package @ensdomains/content-hash was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190661 Malicious code in @asyncapi/multi-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fca41600409d9446c4771677d000e0c23cb7f5a5d876cff66c762472d477bae The package @asyncapi/multi-parser was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190638 Malicious code in @asyncapi/modelina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6021816ea47fd6743ed24c196df8db60f0649e0d5b185ceb9b418ba457b21e3 The package @asyncapi/modelina was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190636 Malicious code in @asyncapi/generator (npm)

@asyncapi/generator version 3.3.1 was published as part of the "Miasma RAT" software supply-chain attack campaign identifier "miasma-train-p1" that compromised several widely used @asyncapi npm packages on 2026-07-14. The malicious code was injected using whitespace hiding: it is appended to a...

MAL-2025-190642 Malicious code in @asyncapi/react-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9ebe88915a6eee986912a6566783764ff832588763eaa7b763710ed9f992299 The package @asyncapi/react-component was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190635 Malicious code in @asyncapi/avro-schema-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 563d7e586605241445ca55919018f95a81d98cbf9599eefa9c812eef9ccd7747 The package @asyncapi/avro-schema-parser was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190647 Malicious code in @postman/tunnel-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6961dafcc910bb7a6b1db8cb597068eeb85f973dcd669392354a7b614928dbf5 The package @postman/tunnel-agent was found to contain malicious code. Source: ghsa-malware...