Malicious code in @kvytech/medusa-plugin-promotion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2a466e1f572169367ae23de09311bd07d68a2fb1a6b31c6e3347a8f7305f2e5 The package @kvytech/medusa-plugin-promotion was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191342 Malicious code in @voiceflow/dependency-cruiser-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f310f0649a09ab3e8f8ca155d2067e1f39ad9ac40a987851fd0dd352ffc268fe The package @voiceflow/dependency-cruiser-config was found to contain malicious code. Source: ghsa-malware...

Malicious code in @pergel/cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d52bf0972dc9dad856bf4bc427d7d1bc127b3b0db55ec37a6e1d5327ffe59237 The package @pergel/cli was found to contain malicious code. Source: google-open-source-security...

MAL-2025-191175 Malicious code in @accordproject/concerto-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d208898af793502494e9b8d4eaa5f6964e2ff49ff7fd50ca8dff9e9e40191313 The package @accordproject/concerto-types was found to contain malicious code. Source: ghsa-malware...

Malicious code in valuedex-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7604b9b49dff9ce4a66119dcd337c975d53e669752a1964d523b95bce8b96761 The package valuedex-sdk was found to contain malicious code. Source: ghsa-malware 14bcd330b75ba074bb0ea2ba295bf74570677a718d844ef4f7e18fbd051594da A...

MAL-2025-191224 Malicious code in @fishingbooker/react-swiper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06f57ab28c32fa764c92d001b6c970f064bf1c5544959b2c677d8ce8f26d3bd5 The package @fishingbooker/react-swiper was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191144 Malicious code in react-native-jam-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4651dd576f405b8b0d0fd7724638dce527ed7cec18cdfc20e4b49f5cc3f9006d The package react-native-jam-icons was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191082 Malicious code in create-director-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d71b99ae491d4f679e88d87285e36727c75273f7aa0bcacaa8f435d799bb332b The package create-director-app was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191030 Malicious code in @lessondesk/material-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 124d8e4d2ba731e6a005fd1c68c60af6629b037c8c121d0468394110d2f98103 The package @lessondesk/material-icons was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191062 Malicious code in @varsityvibe/validation-schemas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbd2bb2effb1b3935deef38346c305be9651765d2e15c4256943b343b2a3c6f3 The package @varsityvibe/validation-schemas was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191101 Malicious code in generator-meteor-stock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 678199611d26a80c99b9cad377ac570dda69e8bc8ed1114a1178d98c2c611973 The package generator-meteor-stock was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190996 Malicious code in react-native-email (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685a2ceb0fc4b3de8462a07c55626285d47bbb72612a7feac2582a7dbfc2a606 The package react-native-email was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190909 Malicious code in @postman/postman-mcp-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7c276129c0d99cb4f8aa63e9f3911b1f38145837396ac3b00ba48533a6050b8 The package @postman/postman-mcp-server was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190910 Malicious code in @postman/pretty-ms (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2d31f7cbd143304b0472244ba5f73daa6e96abbc923b854d2736c5ea7807d16 The package @postman/pretty-ms was found to contain malicious code. Source: google-open-source-security...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

MAL-2025-190825 Malicious code in @strapbuild/react-native-date-time-picker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5a0237f0f0916f69a132f28afefe58f6c681c43c8dd6d3ca62ae2a3c2d6af45 The package @strapbuild/react-native-date-time-picker was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190848 Malicious code in lite-serper-mcp-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4004eeb497395a7e5423b056c76905cd2679f242fc432352479ee7b657383084 The package lite-serper-mcp-server was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190796 Malicious code in @actbase/react-native-simple-video (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df9f78c8d60111302902eadd3b683dc87591b36eedaa9ecb63d445745091aee6 The package @actbase/react-native-simple-video was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190816 Malicious code in @kvytech/medusa-plugin-newsletter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99033b798316d2e4a30d7900d30e42c8339263e325be24419a9856beb1623378 The package @kvytech/medusa-plugin-newsletter was found to contain malicious code. Source: ghsa-malware...