Malicious code in dolyame-ui-codemods (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa4592f76ef0995b4e3c8b0cc15c00862cf594cbaebbfcd2bf25d2640bbf6012 On require'dolyame-ui-codemods', index.js loads polyfill.js, which reconstructs remote hostnames from split string-fragment arrays joined at runtime...

MAL-2026-13146 Malicious code in dolyame-ui-codemods (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa4592f76ef0995b4e3c8b0cc15c00862cf594cbaebbfcd2bf25d2640bbf6012 On require'dolyame-ui-codemods', index.js loads polyfill.js, which reconstructs remote hostnames from split string-fragment arrays joined at runtime...

MAL-2026-12041 Malicious code in platform-ui-codemods (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c72999be0ce122b904fcb710f5438a0d1718a3d121dd1377123c5d710aa9e27 On require of the package, index.js loads./compat.js whose top-level init downloads a platform-specific binary from a set of Cloudflare Workers mirro...

Malicious code in @servicetitan/anvil2-codemods (npm)

npm/@servicetitan/anvil2-codemods is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

Malicious Package

Overview platform-ui-codemods is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

[SECURITY] Fedora 44 Update: python-libcst-1.8.6-4.fc44

LibCST parses Python source code as a CST tree that keeps all formatting details comments, whitespaces, parentheses, etc. It's useful for building automated refactoring codemod applications and linters. LibCST creates a compromise between an Abstract Syntax Tree AST and a traditional Concrete...

Malicious code in fusion-codemods (npm)

The package fusion-codemods was found to contain malicious code...

MAL-2025-21059 Malicious code in fusion-codemods (npm)

The package fusion-codemods was found to contain malicious code...

Malware in glamorous-codemods

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-1557 Malicious code in glamorous-codemods (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a6ea39de6911785f412a5a42905522010930dec6afece74458f8b4859a0fce5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in glamorous-codemods (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a6ea39de6911785f412a5a42905522010930dec6afece74458f8b4859a0fce5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...