MAL-2026-146 Malicious code in spark-ar-dynamic-mocks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e041fd0dd06edcd5beedc3297cfb4326de3cb34e6e854601de47b872b93f9b24 The package spark-ar-dynamic-mocks was found to contain malicious code. Source: ghsa-malware...

Malicious code in tailwind-autoanimation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 239c7b556685c76e1b25bf8ec701e0688ec975920ddc409d56365b6c38b30edc The package tailwind-autoanimation was found to contain malicious code. Source: ghsa-malware...

MAL-2026-91 Malicious code in okta-auth-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0d2189b5df6091ef38c2619c0ed24b8814459b769da6b646901bb0d1987a440 The package okta-auth-js was found to contain malicious code. Source: ghsa-malware 65d7548ce9f766315a32892d8f9588740b8fab7cc50443598ea65e8e0ce9b2ab A...

Malicious code in wikibuy-mobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95afdd748611bc8b6c2cd619ad873d1ff6d1928786e10d4429487e819c9f8af1 The package wikibuy-mobile was found to contain malicious code. Source: ghsa-malware 0040ed4ba77f055d03cc31ab35b4079ff949423ed02d430037158aed38edfb02...

Malicious code in redis-cookie-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c702113d5f2bf54eeb40b14947991242428d0d3fe07c09560ea2c10d953975f The package redis-cookie-js was found to contain malicious code. Source: ghsa-malware b7f1f65a70f0f5ed9257e64aa9d820766513adeb5a13fc8ac7ae11b9cf58d57...

MAL-2025-192968 Malicious code in express-js-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e922c32d1b163c8938985f7665f539243b9be99316491150e61476d30cf0ce68 The package express-js-web was found to contain malicious code. Source: ghsa-malware 50f874487616a31800182c5b87aec47559f7136d5ed3a84355446b795a3137d7...

MAL-2025-192762 Malicious code in supply_chain_dummy_test_3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1963b5503ceeb0e8ed806c386f27edc1761eab24549419a8911a00f525b4a4c The package supplychaindummytest3 was found to contain malicious code. Source: ghsa-malware...

Malicious code in chai-tests-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e06b5ce760a0d0c13a10c5738f8e32b1b4a973261792b91f120017fa30e8352 The package chai-tests-await was found to contain malicious code. Source: ghsa-malware f36b7f537c61a8edb98af7f5d3c8fbc98d47dc0566ead08de39bab2fa58104...

MAL-2025-192744 Malicious code in huangmingming-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34b1eeb67a3d88661777e42783fdb91d2347376e8c6eae10588f559642d2bf53 The package huangmingming-demo was found to contain malicious code. Source: ghsa-malware...

Malicious code in ctfvamp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60afd58ec7b3c88e49140c847bac2c30a9e0e6d9f4f700125d59a3302bb9dac2 The package ctfvamp was found to contain malicious code. Source: ghsa-malware 813e410e18d7609781e8b8a67e5750a2e2652e69245b8a6d343d9ea8364d75a6 Any...

MAL-2025-192622 Malicious code in chai-as-awaited (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e469d359c2a3a5ca20b47691e64d2330d38d9ad0f173fb440b2ac677d333d6a The package chai-as-awaited was found to contain malicious code. Source: ghsa-malware df0ec4507c7a16056091fbf705d97408c308041bf9b5798d113fdc3042a00b3...

Malicious code in elf-stats-cocoa-workshop-459 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 362f3da17da5b5a6cbb8124715f6d31867664acc26b4bbbe8537ba02c9dc9677 The package elf-stats-cocoa-workshop-459 was found to contain malicious code. Source: ghsa-malware...

Malicious code in viktorparserctf7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cea8d189f98186e2482dbc1f838c4c1776defe4d30e5dedae00ee7beb3d222be The package viktorparserctf7 was found to contain malicious code. Source: ghsa-malware 18f308383dbcb39c42e9ac4c313b1a6071b4f348bd4793aa099daff963cf03...

Malicious code in ppppparserfruit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b366d76e6719092198989d8a4c7f2796fa7b475889d08f835356746bd32ca32 The package ppppparserfruit was found to contain malicious code. Source: ghsa-malware 4fd640db548f81f7a36d303c19422e90ecfa657300ff3c23d954461bbb0f8c0...

MAL-2025-192624 Malicious code in chai-nerd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector debbd45ba7868f5eca573b8e1aa2ce52439e75cc632f1149ce670f8e3f17abbc The package chai-nerd was found to contain malicious code. Source: ghsa-malware c5a2651b8c60bc1c29940656635411bf52439baa544a902ebf25b1d8c95c276a Any...

MAL-2025-192588 Malicious code in elf-stats-fuzzy-wreath-278 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de72f83ee4c58e98151bb08bdad43674b0ee28f24618856adaf402b3e2ddbcd9 The package elf-stats-fuzzy-wreath-278 was found to contain malicious code. Source: ghsa-malware...

Malicious code in polygon-src (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b975bdc3690d0deccba20490d0c56eec9e073ff48c7f949d5c9554489445ff2 The package polygon-src was found to contain malicious code. Source: ghsa-malware f3e7ff8566f8fc6fd21a8bcad4e3d2684026f6e9eb0a5ac2ccff5d46112ac99e An...

Malicious code in @mohamed1687/iut-encrypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c488ccf33f70ad27f3dba325a7686c40ac429f84d8ae53d608dc8103e1320adb The package @mohamed1687/iut-encrypt was found to contain malicious code. Source: ghsa-malware...

Malicious code in cms_comp_static (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e057568833f54e2250c5364e595d7a3046f4eb94f2484b9a0a2236b948cb10f The package cmscompstatic was found to contain malicious code. Source: ghsa-malware 38ce02191cf2d82246d56083ba8f7c2c4c0f14a71060bf8beaea95851f3c7a1e...

Malicious code in sd-pay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9616f3280e84767be7a4d7eb72057a907816c66dba6104915b31df22260c16f4 The package sd-pay was found to contain malicious code. Source: ghsa-malware a8a08228b2c2618675e777b8bd306f5499f39767b26a7e12deb1dc0ce91175b5 Any...