MAL-2026-1772 Malicious code in libxmljs12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ee7e3fb53b96ddcd2961ae800b9d761e4c39ff53bcf5894200f41d12fa88942 The package libxmljs12 was found to contain malicious code...

MAL-2026-1737 Malicious code in fe-lib-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc3834e7b034601a3ed7f032e0575770c41742c9f13761e0e79ced9c7893af86 The package fe-lib-theme was found to contain malicious code...

MAL-2026-1721 Malicious code in ehance-assistant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 128d207ed08094b4cb1eb4e4cd448c7158c3896b8d4ec486c92790407adc99b5 The package ehance-assistant was found to contain malicious code...

Malicious code in dstny (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f626d298a9c4cfb632526a78be22b6af5d196ba9b736ecfe9eab8daa2df73e99 The package dstny was found to contain malicious code...

MAL-2026-1716 Malicious code in dotenv-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c1892dd92715cddb9d2bc58111d6b2e4352677ff4d6b155ed7ddc9e04f06edf The package dotenv-plugin was found to contain malicious code...

MAL-2026-1711 Malicious code in dotenv-int (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ff3b8c2dda09766587481490c9be74a1af10a9660698a8f7b8f31a7df47bc96 The package dotenv-int was found to contain malicious code...

Malicious code in dataterminal-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e5edeeb534b27862802b775a378680a4755cccb09d13481c4525f63821bd81d The package dataterminal-ui was found to contain malicious code...

Malicious code in chain-cli-promised (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7e399daf13fda688fc1a6bb911c0bf7582ef52fff3eb5af58fbd8c0934b88a The package chain-cli-promised was found to contain malicious code...

Malicious code in chai-promised-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4af3ac4bdf4f878612b66ee0cad227e2bef184fe763ff80478fc0905107d3edb The package chai-promised-await was found to contain malicious code...

MAL-2026-1677 Malicious code in chai-cli-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d9f4be84db26d0ce71d5bcfda424b1af08abddc37c23d3a2ef2b4263534fde2 The package chai-cli-async was found to contain malicious code...

CVE-2025-41258

creationtimestamp| type| source ---|---|--- 2026-03-18 12:40:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhdj22ksx42c 2026-03-25 13:40:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhv7o2bym32i...

MAL-2026-1649 Malicious code in advertising-podlet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bb234dd090695707ab05d6b4726b89a073ae2f517cad9b2fb7069aa58d08360 The package advertising-podlet was found to contain malicious code...

MAL-2026-1648 Malicious code in advertising-events (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9e784ce1a0573b476f4232dcdc6136efaa217d3483765875dbea0aae015542d The package advertising-events was found to contain malicious code...

MAL-2026-1647 Malicious code in adobe-tracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ea7322d0f5d2ca7aa6671313fe1f8f467c5db667987215e36535698aa5885df The package adobe-tracking was found to contain malicious code...

Malicious code in @panopto/api-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02e9e606e2aef11de752a18ad63f5772f485bb0fd40f66cc61b2e0f9a5ffe26f The package @panopto/api-core was found to contain malicious code...

MAL-2026-1618 Malicious code in @f5rest/odata-lens (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cc3c0ba56ae7cb9905be55c656786aa9987166dcad2e4d6e4d273134018c90e The package @f5rest/odata-lens was found to contain malicious code...

Malicious code in @f5rest/icr-metadata-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 997e0d3cb7fd000b08e52b7679e870d2ade8d698b16aeec6f2497aae10bea376 The package @f5rest/icr-metadata-generator was found to contain malicious code...

MAL-2026-1603 Malicious code in @emerald-react/checkbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73d32a1bb5753affaccc3f875ba482d2565c062a5eb65862620595a84309ff3f The package @emerald-react/checkbox was found to contain malicious code...

MAL-2026-1592 Malicious code in @cbreone/survey-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa512020ca8dd602c54abcdc6b69379bc5656423a35dabd5200db0e3b8af7fd6 The package @cbreone/survey-ui was found to contain malicious code...

Malicious code in @at-point/valiant-widgets-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87532b33037ce0d72b75f2ca654c5b66bf97048b3d1226ca6bdb396af6670c4a The package @at-point/valiant-widgets-v2 was found to contain malicious code...