MAL-2026-11742 Malicious code in @ornikar/babel-preset-react (npm)

npm/@ornikar/babel-preset-react is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

MAL-2026-11740 Malicious code in @ornikar/babel-preset-base (npm)

npm/@ornikar/babel-preset-base is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

Malicious Package

Overview babel-preset-lib-client is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

MAL-2026-10214 Malicious code in babel-preset-lib-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4274de0136aa69f8b0f4eba03412c7809a1b8c2446bb3ed7f6de1333475aa4c4 index.js, the package main, runs a load-time IIFE that collects OS platform and architecture, hostname, username, private and public IP via...

Malicious code in babel-preset-lib-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4274de0136aa69f8b0f4eba03412c7809a1b8c2446bb3ed7f6de1333475aa4c4 index.js, the package main, runs a load-time IIFE that collects OS platform and architecture, hostname, username, private and public IP via...

MAL-2026-6131 Malicious code in computerrock-babel-preset-react-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8987a1638ceebfb3dc8c8fc29e8e696fa15c6fe667697dfc367f59bf56b14cfa The package impersonates the well-known babel-preset-react-app under a fake org-style prefix and ships no Babel preset code. package.json declares...

EUVD-2026-0744

Malicious code in babel-preset-ibm-cloud-cognitive npm...

Malicious code in babel-preset-ibm-cloud-cognitive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d724269c7d6a4142b8a62d99d3e28073032dd4c6de68d5720ede18b020af4b19 The package babel-preset-ibm-cloud-cognitive was found to contain malicious code...

MAL-2026-10 Malicious code in babel-preset-ibm-cloud-cognitive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d724269c7d6a4142b8a62d99d3e28073032dd4c6de68d5720ede18b020af4b19 The package babel-preset-ibm-cloud-cognitive was found to contain malicious code...

EUVD-2025-199175

Malicious code in babel-preset-kinvey-flex-service npm...

Malicious code in babel-preset-kinvey-flex-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95227fb68cd76580469df042e11e087ac694eaf2d50c6ac95514edcaee6056a4 The package babel-preset-kinvey-flex-service was found to contain malicious code. Source: ghsa-malware...

Malicious code in @lessondesk/babel-preset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa9019603bb68a67d97d54238e2318b1dcfdb801519fbb4b19d881b139cb7e13 The package @lessondesk/babel-preset was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199180

Malicious code in @lessondesk/babel-preset npm...

MAL-2025-191027 Malicious code in @lessondesk/babel-preset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa9019603bb68a67d97d54238e2318b1dcfdb801519fbb4b19d881b139cb7e13 The package @lessondesk/babel-preset was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198749

Malicious code in @zapier/babel-preset-zapier npm...

Malicious code in @zapier/babel-preset-zapier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9189b0afaf74836818d1b081a853ae3fcc6193845bdbd74338171e535fd1391 The package @zapier/babel-preset-zapier was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190761 Malicious code in @zapier/babel-preset-zapier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9189b0afaf74836818d1b081a853ae3fcc6193845bdbd74338171e535fd1391 The package @zapier/babel-preset-zapier was found to contain malicious code. Source: ghsa-malware...

Malicious code in babel-preset-pp-react (npm)

The package babel-preset-pp-react was found to contain malicious code...

Malicious code in babel-preset-tedium (npm)

The package babel-preset-tedium was found to contain malicious code...

Malicious code in babel-preset-webpack-es2015 (npm)

The package babel-preset-webpack-es2015 was found to contain malicious code...