MAL-2025-192985 Malicious code in error-fallback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bcddff3dd9b13e5fc8e37afd8432e9485d1204cb5cd6a546a46e4580371f929 The package error-fallback was found to contain malicious code. Source: ghsa-malware b9c747aad11a6b98fa9f2fb07cb9410f6bc4e51390f358f1ff5d546c14b08134...

Malicious code in rt-interactive-card-collection (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9858817ec5f5e5af9db5f5033c3626e4214faa07e1169e950573bbca309a975e The package rt-interactive-card-collection was found to contain malicious code. Source: ghsa-malware...

Malicious code in @sodexo-connect/sap-cdc-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4e047fc494b2206648c16c1e980cbf3aed51b9c27a8a9287cabfa869aab9095 The package @sodexo-connect/sap-cdc-client was found to contain malicious code. Source: ghsa-malware...

Malicious code in viktorparserctf4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00678c1855d2692f49a5643aecec33c4181e61a390c1852ee6b7200f0c2f3ca1 The package viktorparserctf4 was found to contain malicious code. Source: ghsa-malware 0961c05d572349a1c68d499506c8317678a9f123ebbeaf7540186a8cbf6f87...

MAL-2025-192651 Malicious code in viktorparserctf5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224c79dee4e3a36c67bd12a6cc3f0578d4eb4fe75dd92e3dde8aae08ce646fee The package viktorparserctf5 was found to contain malicious code. Source: ghsa-malware 49d2b2440876d75785bb3d21a9f41cb3226ab45155823ae19b472b367e993b...

MAL-2025-192641 Malicious code in tailwind-color-shine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a354c1527256b0cbb0309429b90ad036ded6b2cc1b2d29b8f2809af26f718cf7 The package tailwind-color-shine was found to contain malicious code. Source: ghsa-malware...

Malicious code in ctfparsertna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52cd5612214cb1fd0ed34899c5e686c4fdbecb4a820e170a3589987c20b9b3da The package ctfparsertna was found to contain malicious code. Source: ghsa-malware 90b9a48b58422c5d9853769c983bd04388558c312be191e3bfd8a82158214d38 A...

Amazon Exposes Years-Long GRU Cyber Campaign Targeting Energy and Cloud Infrastructure

Amazon's threat intelligence team has disclosed details of a "years-long" Russian state-sponsored campaign that targeted Western critical infrastructure between 2021 and 2025. Targets of the campaign included energy sector organizations across Western nations, critical infrastructure providers in...

MAL-2025-192560 Malicious code in kashif-mallah-fca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c3015dc78458d21da40c01cf159c54f0298cd4ce7ea2604eecc18a7ea906cdd The package kashif-mallah-fca was found to contain malicious code. Source: ghsa-malware...

Malicious code in real-time-tweet-streamer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 692b2a444eb479ec815e98413b99cd6cb677cf8be77edef431d8acf9d6c9e5c5 The package real-time-tweet-streamer was found to contain malicious code. Source: ghsa-malware...

Malicious code in chai-promised-chain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a501d6eba591eb49cf120c8aee8c4e0600aacf2263984d3ae14e0d1b53daa92 The package chai-promised-chain was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192314 Malicious code in react-svg-supporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf2d6b643ae6f9563baf5e18621fe86ff8f764a2254785e2300c96aa397a0bc The package react-svg-supporter was found to contain malicious code. Source: ghsa-malware...

Malicious code in tensorfi-secure-hash (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93a1f3633d2738b3112eae340090cc5ca67f6847ed89ade9de6c8448b591c20b The package tensorfi-secure-hash was found to contain malicious code. Source: ghsa-malware...

Malicious code in tailwind-scrollbar-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a67e29aab551c12aaffda6a2fca81e67eb1a1c4a1f4e2a8f544147c7b0182b2d The package tailwind-scrollbar-plugin was found to contain malicious code. Source: ghsa-malware...

Malicious code in mcp-polymarket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c93eadc60da9cb188762b7190a7c6b48a5eaa9766f23d7515b944c05eb3f005 The package mcp-polymarket was found to contain malicious code. Source: ghsa-malware 41eb8c2fd8bee675d7893ba16ddd2f6fd03730818520e928c0320ed2a0306602...

Malicious code in react-svgs-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 081ba740ebfdae5dfc4f53bf53b7658227f6fc78a9c8866727d95d2467991f3e The package react-svgs-helper was found to contain malicious code. Source: ghsa-malware...

Malicious code in @axinom/mosaic-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7168f2a1e0e25128412330dd5022d955509346523f45c453d18e9205eb38b678 The package @axinom/mosaic-cli was found to contain malicious code. Source: ghsa-malware...

Malicious code in @browserbasehq/mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd1d0d39e38fcabc19d825aaf056705056728c59701b5fe8cdf5863839a072b3 The package @browserbasehq/mcp was found to contain malicious code. Source: ghsa-malware...

Malicious code in react-data-to-export (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1955002d61deae12965aabd7f49319a8cd75b916377002d839d153e5fd19d8e6 The package react-data-to-export was found to contain malicious code. Source: ghsa-malware...

Malicious code in @thedelta/eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bf18ec0224183e37e3d7ce155ce74e57988e6cdf5c817d06f892ad4b22a7546 The package @thedelta/eslint-config was found to contain malicious code. Source: ghsa-malware...