MAL-2026-224 Malicious code in inquirer-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 477898ce4223aefeb43a52fa776b7236a069b176dff1c3a9cbfbb13ad57d6a59 The package inquirer-js was found to contain malicious code. Source: ghsa-malware 06897ddbb1fc8aa0c06fc7389198f7f96eceefdbbc08ead1032436eb45a0a0c3 An...

Malicious code in n8n-nodes-hfgjf-irtuinvcm-lasdqewriit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4dabf38b16acea59219df3a3f57a396f3ebe958985096579cd43c419609b764 The package n8n-nodes-hfgjf-irtuinvcm-lasdqewriit was found to contain malicious code. Source: ghsa-malware...

MAL-2026-153 Malicious code in darknet-dispatches-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56bca60f1c0743747f152e1bb34d4c1242fc24bc3500bbc44d7dc2c5235e06e1 The package darknet-dispatches-internal was found to contain malicious code. Source: ghsa-malware...

MAL-2026-156 Malicious code in sparkling-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49e0e650696ea120abbbc0a198865731fbeea781cc9ee947bd39c8f7d76c4eab The package sparkling-cli was found to contain malicious code. Source: ghsa-malware 6185870baa4e15b65e8df51e713dcb6e3e54d79fd00389cfa0f86421cef94f6e...

MAL-2025-192970 Malicious code in portal-lise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd0c023f6f7e2ba4df069103ad42d8cb03575410033a50f5887ec1d0fbe94205 The package portal-lise was found to contain malicious code. Source: ghsa-malware 6d0ea4511808b283817242b827687f9a2fb37a0a7f17db46db1f4acbd6ba0de8 An...

MAL-2026-169 Malicious code in secguest-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae83c0c9ae4ffab006e7b6d1833b54dfb5386dedf3e94dedf500b3af1dc82d1c The package secguest-lib was found to contain malicious code. Source: ghsa-malware 62ef36b4b0912fdc42b94702acf5c8e48b06cb2d3370113c3c875479aacd5e9f A...

Malicious code in viktorparserctf9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5baa36bb3591f46fd01f10673503426d413fafa7a8727f0d8b55cf1f992e03ee The package viktorparserctf9 was found to contain malicious code. Source: ghsa-malware 03978a0f596270c3f829035371906c40beaecabdb7269d15423e61f73f6cbc...

MAL-2025-192638 Malicious code in qwqwqw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4e634690c8bd1d21672a93e09ed423088fe0e7a238b86a40cda9bae547e678e The package qwqwqw was found to contain malicious code. Source: ghsa-malware 200ea085dc96770417e900e08812693529cd6fde1e7ea45a28c8a332382049f1 Any...

MAL-2025-192647 Malicious code in viktorparserctf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80d19b02e0dd824034939772d72a2d958ea2a56c76ea311de8a51aab01e29911 The package viktorparserctf was found to contain malicious code. Source: ghsa-malware e4ba3aabc4f98b1f2b7b53bccd9cbaa880ad68a212b2a6780bd1a8a7e912706...

MAL-2025-192583 Malicious code in swissid-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68ce12ad99bb87750b22a3aa2c0d4bae036e647f446f6c05eb46b7fad1571d13 The package swissid-common was found to contain malicious code. Source: ghsa-malware 2657ec223bbf476c870a3f34e60928d95b1512176e7762f2c01a9aa759f75d98...

Malicious code in xboxlive-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aa54accd06c11d8f868fa0bc7915782404360d01db3c5f80d735584ca984dc8 The package xboxlive-auth was found to contain malicious code. Source: ghsa-malware 330ca3dbdf0006df9f2a21edc3027e6f158c2ee2b4f7c26498a386198e869878...

MAL-2025-192559 Malicious code in iraza2-fca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a7307c50f4f14642add677ac343109c8691dc3c5e67a0de88d27ed958e9593b The package iraza2-fca was found to contain malicious code. Source: ghsa-malware 5f0c32bd90ff347b69dae6471a8099e36ac566490bfa361193fc59f1c53785d4 Any...

Malicious code in near-fast-auth-signer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85ca901df252a441f9253e1a56812e262f6c7282f53587866710310fa282394c The package near-fast-auth-signer was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192298 Malicious code in elf-stats-candlelit-marshmallow-663 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8cf5bd84066a57d6f168967adc62dd26c49c4095817e6db922dc357f63f824e The package elf-stats-candlelit-marshmallow-663 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191453 Malicious code in @flowfuse/flowfuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22ba60a5d020675e45988b9c85546af27a402e4bdd7667fa7d8a30c7f94063f9 The package @flowfuse/flowfuse was found to contain malicious code. Source: ghsa-malware...

Malicious code in @trpc-rate-limiter/hono (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86780189d32c5c6215833b83e8ff4274af92653c41f51d8cb8f9c1e5262bccf The package @trpc-rate-limiter/hono was found to contain malicious code. Source: ghsa-malware...

Malicious code in 02-echo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4304d63d618938cc1d4dc7dab1141d0d40a98c9724393d6986686311ea95ed1e The package 02-echo was found to contain malicious code. Source: ghsa-malware ea51eeff44737fa3bd6eba3c88b458dc42aaea1ded99e3812c204fc1a712be24 Any...

Malicious code in medusa-plugin-logs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7af11d8b0e347690c78b45c790ef5d54f7cadf6d5d2fa89a86ef6c1765ab136f The package medusa-plugin-logs was found to contain malicious code. Source: ghsa-malware...

Malicious code in valid-south-african-id (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a363caeeaaa83a715f0d38b64608e11a39a272a42abe53c92dbbacb133dc927 The package valid-south-african-id was found to contain malicious code. Source: ghsa-malware...

Malicious code in @asyncapi/openapi-schema-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b4e9b39029c1f0084db9cd77fb419e5b003036f5b3db50d6b52097114f0c729 The package @asyncapi/openapi-schema-parser was found to contain malicious code. Source: ghsa-malware...