MAL-2025-49573 Malicious code in zul-wajit78-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe11a287827a6251f231a6f79ad637145bb4d740999a29a715b04e44acfa331d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-49549 Malicious code in zul-menjes100-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4dad26d156bd341f200528b2462bad3c2f932eb0b9fc2fac75dcd03371b8f4f The package zul-menjes100-ruro was found to contain malicious code...

MAL-2025-49516 Malicious code in zaki-miebogor87-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44507fa5c18f50b4c221ebb6c627380d6ac8daef504a4714142379b474f4c633 The package zaki-miebogor87-riris was found to contain malicious code...

MAL-2025-49528 Malicious code in zul-asinan14-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 492e09db454f431014d43cdda431c9a3bea0d0eb025d66702f58a7a52365c3f9 The package zul-asinan14-breki was found to contain malicious code...

MAL-2025-49497 Malicious code in zain-tempe2-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b93ad0756e9657e985293c0ba73e5c28c7e3ffc027dc34285287c2e2f1f2a59b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-49543 Malicious code in zul-ketan40-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7578a39defed2adf83c88ae097b36849ab307e3342ce3adf316ad97439e16de The package zul-ketan40-ruro was found to contain malicious code...

MAL-2025-49572 Malicious code in zul-tumis35-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cc285764f3fb4e3298c5a774d3d1252f454a41741ff65127ef42b920c594ab8 The package zul-tumis35-sukiwir was found to contain malicious code...

MAL-2025-49467 Malicious code in zain-gaplek52-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c776120959d5af6b8fb9702caf74279aedda6695a4b160ae7f09b26a99c49ab6 The package zain-gaplek52-ruro was found to contain malicious code...

SUSE CVE-2025-62375

go-witness and witness are Go modules for generating attestations. In go-witness versions 0.8.6 and earlier and witness versions 0.9.2 and earlier the AWS attestor improperly verifies AWS EC2 instance identity documents. Verification can incorrectly succeed when a signature is not present or is...

Malicious code in runtimemoy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 886d105a6daee134b98d67022d827d5c5becf0b05d5e89c9c326115d79670be5 The package runtimemoy was found to contain malicious code...

Malicious code in gibertserctf7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0573557ee97533415528414c8c42d27e7dd380d35a0a57847a9e99209807910 The package gibertserctf7 was found to contain malicious code...

Malicious code in @deputyapp/copilot2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea8ee55f0fba70e99bcfd17466e3bb1bf57b3bbdd3e6f7a61a54673d0b78aff5 The package @deputyapp/copilot2 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in runtimemoy2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdf89081e36d0c4d68ca37c38ba555b33b3c28a990727e25f741f3e299908bdd The package runtimemoy2 was found to contain malicious code...

Malicious code in supervot4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c95ac7d1a98e1fb363159453426b903c2a83e7bdd67a18f35130cf0cf5f47ab1 The package supervot4 was found to contain malicious code...

Malicious code in megaexploitvorkemol1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0c13215fdde1baead0f1eb06bf68b751465f0714539e7f46f6e62c21d9665b9 The package megaexploitvorkemol1 was found to contain malicious code...

Malicious code in lowerx-package2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f9fa386b19d15d8a4ede1c588cd50b4feaab4926550cdc32567a37dfea42713 The package lowerx-package2 was found to contain malicious code...

Malicious code in runtimemoyv2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dc5cb425150c40ccf9449bf1d279f5d591e715f01f81d46c158b7e17c794d42 The package runtimemoyv2 was found to contain malicious code...

Malicious code in study-lab-e53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62f58b0eed4e51cbdb6bb234b8c3a4e32bf0ad0a60bdeef7e32ffe7d26ac0d8c The package study-lab-e53 was found to contain malicious code...

Malicious code in gca-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdec861d83395f300958ada30581644db6a9e7fe7b1e258cded6074ec5f651d1 The package gca-package was found to contain malicious code...

Malicious code in study-lab-e51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b756a5dc0b496946d6fb90684625cebaac365a7199f1df239818b6bac9cbce5 The package study-lab-e51 was found to contain malicious code...