MAL-2026-1215 Malicious code in whop-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 943bd287cb6375798fdee15ba33f85737201ea9934952ee5d1f2a2336e8cd65c The package whop-sdk was found to contain malicious code. Source: ghsa-malware 4c3e9ca78194532c222b978afd00f7bb4be1ca1ba6cd442e1892d17ee6e67ccc Any...

MAL-2026-1172 Malicious code in @zakhaevv/envai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd4de2673a9f50b205b51474085ef3eb3e78f06618873183038582fb48bacfe The package @zakhaevv/envai was found to contain malicious code. Source: ghsa-malware 12157c0eeb0adb6f316ee9f171691ae08e204ec84f3ad7dabf9213e2af244b7...

Malicious code in solongnerds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4924a4f78f84d4b49d96f2ced7769ac484017ae28bb6fe63f94e937b199222f The package solongnerds was found to contain malicious code. Source: ghsa-malware 5ef9463bd7feaee40d35efb13e75f19b54fd802eeb788cddc3cbbd1ba90b2ba4 An...

MAL-2026-1132 Malicious code in npm-doc-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15626b1cc14583363a71f0902fee65350d72abfd562b2681a322a09e484d4940 The package npm-doc-builder was found to contain malicious code. Source: ghsa-malware 5f47c0a224fe1e1e931a1964d52b91b3b92ac7ec0672507a2c143273c8d59fe...

MAL-2026-1101 Malicious code in argonist (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2aecefee8a1b9d2c70f2c881352080e02186d102f05f82b1c9942a80e899946 The package argonist was found to contain malicious code. Source: ghsa-malware e3e27b60d79e256cf34ebd7b3f37d626812ed621fff44c3b60b08b3144c0f2db Any...

MAL-2026-1074 Malicious code in dgxeon-soket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bc1fe5368b07366735c8e9f8163262c8e77e1be50c66c9158459b89cf348cac The package dgxeon-soket was found to contain malicious code. Source: ghsa-malware 7814fe539784c04cc6450ee43c3902eab63d439030fa47b7678ccb32e8655119 A...

Malicious code in @skyzopedia/baileys-mod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 027588d92a2ed6ba301f546a8688200af1fbcca8cef1dbe2b8ef1061b414c110 The package @skyzopedia/baileys-mod was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1023 Malicious code in @kiukicom/sidebar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cb39359f91f7a9efe145c20140da0ac4320a6fcce0335e8619af25bcd76c3af The package @kiukicom/sidebar was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1014 Malicious code in chai-iotype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a2528589040b93908e5bf212c3555330685a1e4a864848c672bfc7c9db91d9d The package chai-iotype was found to contain malicious code. Source: ghsa-malware 15de0c2b34317027aeda224019cbe2bd0c8c0e1d0c28cc5ff4f23cb6c0fcbc92 An...

MAL-2026-952 Malicious code in claud-code (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 858992810c1a4133d95b6fa19033c07591db548a46df39b67e0d393d7dd212ad The package claud-code was found to contain malicious code. Source: ghsa-malware 5fe9842d778d45ad5b5e4d81db678d608711dd4b186e053569dae6f210481651 Any...

MAL-2026-872 Malicious code in stylelint-recommended (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f0d274dda57eb9c09967bc0bfad1709fd8ddcbf3ec4c0e7e9828826e6d0d9a The package stylelint-recommended was found to contain malicious code. Source: ghsa-malware...

MAL-2026-807 Malicious code in web3-sinon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6990443632c3224a5e897d1747fcd76f782eda8d020447076d59cf305b03c82 The package web3-sinon was found to contain malicious code. Source: ghsa-malware 7d195e4b1eda9212f69e313de4107deae82670a9615ec25b86c8aaaf3df0e1f9 Any...

Malicious code in mongoose_update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91df51d75c82831870e737a45d083f0f75a4efd3fa5446b0c07a5c8c9ad910fd The package mongooseupdate was found to contain malicious code. Source: ghsa-malware c8c705834895c7083b2f00f874d9761f360f0208ee61aaeec6af5c2a806841e5...

Malicious code in ansi-universal-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffa5e839c2761f91f4d422c6c89799495ba4a3171731ecac75e00647bbf95904 The package ansi-universal-ui was found to contain malicious code. Source: ghsa-malware...

Malicious code in shroom-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12ce31b267373b04b6db8fa70688917b146c9cf34f2d548b58890a950af4f32a The package shroom-kit was found to contain malicious code. Source: ghsa-malware df93160efafaee42f3f1c238618282cd6845e4fea4f6b0804f5e759934e60f71 Any...

Malicious code in recaptcha-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79037ac310e3ba605ade8d6657ea9fd4d8261583079397795e7afccbf432a4fd The package recaptcha-cors was found to contain malicious code. Source: ghsa-malware 4936a94d5d7ed5509cecba8ba4b13b5d37ff1f114318c83e868dc6e5627818be...

Malicious code in testing-package-bose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf9cef522b7a8b6ce59335bbac80dcc488adedcd397bbc6b1e12816b4c54d170 The package testing-package-bose was found to contain malicious code. Source: ghsa-malware...

MAL-2026-333 Malicious code in tronweb-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d60b4098130965b3c2a5c2db0b1ce1c0f4cbde94f9719e9f12b3b90c982478f The package tronweb-tool was found to contain malicious code. Source: ghsa-malware 6592f1600a6d596ff1db03a849560d8a3ccd1643ad249a7bb5a46bac048e2748 A...

MAL-2026-224 Malicious code in inquirer-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 477898ce4223aefeb43a52fa776b7236a069b176dff1c3a9cbfbb13ad57d6a59 The package inquirer-js was found to contain malicious code. Source: ghsa-malware 06897ddbb1fc8aa0c06fc7389198f7f96eceefdbbc08ead1032436eb45a0a0c3 An...

MAL-2026-208 Malicious code in @gwp-gtmt-components/event-listener (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 468c91e4f79d71c29b131ccb10fac2c3917af3d3a443cf252feeb683ef68d797 The package @gwp-gtmt-components/event-listener was found to contain malicious code. Source: ghsa-malware...