MAL-2025-49529 Malicious code in zul-bakso27-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01d8dbdf2cba0605307f345e189ea8b019c9009c3d7866fc88367b869b693c25 The package zul-bakso27-sluey was found to contain malicious code...

MAL-2025-49543 Malicious code in zul-ketan40-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7578a39defed2adf83c88ae097b36849ab307e3342ce3adf316ad97439e16de The package zul-ketan40-ruro was found to contain malicious code...

MAL-2025-49467 Malicious code in zain-gaplek52-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c776120959d5af6b8fb9702caf74279aedda6695a4b160ae7f09b26a99c49ab6 The package zain-gaplek52-ruro was found to contain malicious code...

MAL-2025-49572 Malicious code in zul-tumis35-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cc285764f3fb4e3298c5a774d3d1252f454a41741ff65127ef42b920c594ab8 The package zul-tumis35-sukiwir was found to contain malicious code...

MAL-2025-49573 Malicious code in zul-wajit78-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe11a287827a6251f231a6f79ad637145bb4d740999a29a715b04e44acfa331d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-keripik16-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 327007e434ebbc070e76832bdbf0c269d6e92ccc5f8bf95b05b50a1f18327509 The package zul-keripik16-apidev was found to contain malicious code...

MAL-2025-49504 Malicious code in zaki-jengkol75-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37a94939b03561d0e4d4858a7f933abf3c7083255b039863c33ea45d4f90ac01 The package zaki-jengkol75-ruro was found to contain malicious code...

MAL-2025-49525 Malicious code in zaki-telur21-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c52ac5f32db6200d9b719037ca28c7cac4bf3bf3bbe9dbeab476c6dfdfe79cd The package zaki-telur21-ruro was found to contain malicious code...

SUSE CVE-2025-62375

go-witness and witness are Go modules for generating attestations. In go-witness versions 0.8.6 and earlier and witness versions 0.9.2 and earlier the AWS attestor improperly verifies AWS EC2 instance identity documents. Verification can incorrectly succeed when a signature is not present or is...

Malicious code in @deputyapp/copilot2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea8ee55f0fba70e99bcfd17466e3bb1bf57b3bbdd3e6f7a61a54673d0b78aff5 The package @deputyapp/copilot2 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in runtimemoy2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdf89081e36d0c4d68ca37c38ba555b33b3c28a990727e25f741f3e299908bdd The package runtimemoy2 was found to contain malicious code...

Malicious code in supervot4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c95ac7d1a98e1fb363159453426b903c2a83e7bdd67a18f35130cf0cf5f47ab1 The package supervot4 was found to contain malicious code...

Malicious code in megaexploitvorkemol1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0c13215fdde1baead0f1eb06bf68b751465f0714539e7f46f6e62c21d9665b9 The package megaexploitvorkemol1 was found to contain malicious code...

Malicious code in runtimemoyv2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dc5cb425150c40ccf9449bf1d279f5d591e715f01f81d46c158b7e17c794d42 The package runtimemoyv2 was found to contain malicious code...

Malicious code in lowerx-package2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f9fa386b19d15d8a4ede1c588cd50b4feaab4926550cdc32567a37dfea42713 The package lowerx-package2 was found to contain malicious code...

Malicious code in study-lab-e51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b756a5dc0b496946d6fb90684625cebaac365a7199f1df239818b6bac9cbce5 The package study-lab-e51 was found to contain malicious code...

Malicious code in study-lab-e53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62f58b0eed4e51cbdb6bb234b8c3a4e32bf0ad0a60bdeef7e32ffe7d26ac0d8c The package study-lab-e53 was found to contain malicious code...

Malicious code in gca-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdec861d83395f300958ada30581644db6a9e7fe7b1e258cded6074ec5f651d1 The package gca-package was found to contain malicious code...

MAL-2025-49420 Malicious code in logstealer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99bf68ac32c38c1a205b88db8107a6c806e9e8da5718755fc35978b0fa36a5d7 The package logstealer was found to contain malicious code...

MAL-2025-49447 Malicious code in test552 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99110b31de78ef96b888983cac90011b7b98824aa63efdb7fefbdba3cad455c7 The package test552 was found to contain malicious code. Source: ghsa-malware 7441a1462575b0ce7d40aa23dbdf79441ddc6995aba4903a1e1373792d44067a Any...