Malicious code in async-mutex-hook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 624c93cbd007656467757c5504db29971b220bc36685eda2af6a1d1390715133 Package is published under the name async-mutex-hook and self-describes as a Promise-based mutex library, but ships no mutex implementation. Its...

MAL-2026-10582 Malicious code in async-mutex-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7df420be80a00abb5efead6e83b37885cc37a347641386c0633719197dcb3dc5 Package published as 'async-mutex-v2' advertises itself as a Promise-based mutex but ships no mutex implementation. The main entry index.js exports...

MAL-2025-7093 Malicious code in @async-mutex/mutex (npm)

The package @async-mutex/mutex was found to contain malicious code...

async-mutex (>=1.0.1, <=1.4.1), blocking-permit (>=0.1.0, <=1.2.1) +18 more potentially affected by CVE-2020-35915 via futures-intrusive (>=0.2.2, <=0.3.1)

futures-intrusive CARGO version =0.2.2, =1.0.1, =0.1.0, =0.4.0, =0.4.0, =0.4.0, =0.2.0, =0.10.0, =0.3.6, =0.3.7 - raii-counter-futures 0.1.0 - stm32f1xx-futures 0.1.0 - switchyard 0.1.0 and more Source cves: CVE-2020-35915 Source advisory: OSV:GHSA-4HJG-CX88-G9F9...