Malicious code in cognito-auth-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9a30b64637eafca16b5e2eba32def6f026de37b2e2085a66aa627c5bfe9403d The package cognito-auth-plugin was found to contain malicious code. Source: ghsa-malware...

Malicious code in sd-ccp-module-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 767cf50a9b0a16fd39e9fbbf533657ccbafe4120cb01d2c6da4c9fedc2cb342e The package sd-ccp-module-client was found to contain malicious code. Source: ghsa-malware...

Malicious code in sky1oauth2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ca06041cd5b933101c6474a9f6054fb9dff579cf44ead75a1d1f906af0d6de The package sky1oauth2 was found to contain malicious code...

Malicious code in @spx-workforceops/shared-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e3a2bf3fdf03e628dd6981636169c3053e7aa01b62d709e07a1e13184f0b93 The package @spx-workforceops/shared-vue was found to contain malicious code. Source: ghsa-malware...

Malicious code in @wb-team/uikit-myteam-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdf39991881d2a08d3aa421675b4c1a7b562a4b50c70e7d9c0f7bb54a0d8f0e4 The package @wb-team/uikit-myteam-web was found to contain malicious code. Source: ghsa-malware...

Malicious code in sd-navbar-module-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff5eb5c5baa5e482655961b2dd4ced29ff771428c5870106e0a30cc916913908 The package sd-navbar-module-client was found to contain malicious code. Source: ghsa-malware...

Malicious code in comstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fdbf1b29e6524cad706ce8d312446d5869b2fb6614892bf9a350ade6b66d3df The package comstrap was found to contain malicious code. Source: ghsa-malware 9c9cb6396bf07d4b55b2e600f0e19966c1141733ef266c323e5382e75d0e1b76 Any...

MAL-2026-273 Malicious code in chakra-ui-2--react-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d8e94e720f2e969a3349854427d9ac418ea507516a488bc52eef4397d86e5e8 The package chakra-ui-2--react-utils was found to contain malicious code. Source: ghsa-malware...

MAL-2026-281 Malicious code in eniram-web-common-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0fed7ec2d24f837bd31fd9768a9727452b9bf8ed355a7073f055fb4fba075c8 The package eniram-web-common-ui was found to contain malicious code. Source: ghsa-malware...

Malicious code in omnicore-ds2-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c3582de0d77fa95932500d8933267b336557148b45ed5f23d090e2982962d9e The package omnicore-ds2-sdk was found to contain malicious code. Source: ghsa-malware 7990efbda2464df9633bde060381ff6c9ec75fa286fafb46cc27b4a16c6a98...

MAL-2026-278 Malicious code in comstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fdbf1b29e6524cad706ce8d312446d5869b2fb6614892bf9a350ade6b66d3df The package comstrap was found to contain malicious code. Source: ghsa-malware 9c9cb6396bf07d4b55b2e600f0e19966c1141733ef266c323e5382e75d0e1b76 Any...

MAL-2026-280 Malicious code in dws-dx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1848d83c748ccd9cbb44be0e7d1b8e97b061b5f8f5214616639aea3339b6058b The package dws-dx was found to contain malicious code. Source: ghsa-malware 1e1aaa27dc21f4ca10b5c3d7ae20cf56d8ede985793d6dd4654d34b1716b3d7b Any...

MAL-2026-289 Malicious code in js-observability (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec70afb236a90dfd2de166a3fe7626fc3c10526de7dffda8468c0a8eccaf964b The package js-observability was found to contain malicious code. Source: ghsa-malware e73e93c1fefbabe1cd40c1fafdb7cd01b97aae241106ecee4aad599c02756d...

MAL-2026-283 Malicious code in flag-v21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 861f8969022fe9225cbe8c49c702b9604d3d204909179189ab09fa288c2c8b68 The package flag-v21 was found to contain malicious code...

MAL-2026-318 Malicious code in victim-package-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63c6e07506d6bce3381b3ad191f41efdd8c5cf244efe3e5302c93a22f4a3f862 The package victim-package-a was found to contain malicious code. Source: ghsa-malware e92a76802a941997e89cb243c7f4f37405b7865b7cc8e5b90aa9accb864ced...

Malicious code in tickncook-robot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca37d83d19175da5b3240e35b77605369a59fac393b51117458e1d852e2c86f5 The package tickncook-robot was found to contain malicious code. Source: ghsa-malware 69891529072c56796517d40db82d60db1d56f7a70c03567b4b9d7341d9125f9...

MAL-2026-18 Malicious code in initializers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfa9db2df654753e6f6ebb5f77fd9607441b642e1da3306fbf8a1909fb41c179 The package initializers was found to contain malicious code. Source: ghsa-malware e0374b8e7835a603949d751a91405b851c622bd8536d96cf80a9b092fca15c35 A...

MAL-2026-20 Malicious code in kid-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bc35802113ea5c7ac4e3d956e72af4ce3fbc5a9b3b8fc4c9d610d158d65250a The package kid-api was found to contain malicious code...

Malicious code in fix-cc-raiesy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17aa6cbdc4986ee5b3aa8c4ea5e5a4dc3ddfc9f7d266bdde5f9d81445551cb73 The package fix-cc-raiesy was found to contain malicious code. Source: ghsa-malware 8e5d10de64ca997908f8b7ba463f0bc41b2553f4d883ab13b6e9f7a4fa5d387e...

Malicious code in kid-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bc35802113ea5c7ac4e3d956e72af4ce3fbc5a9b3b8fc4c9d610d158d65250a The package kid-api was found to contain malicious code...