MAL-2026-137 Malicious code in rt-da-classic-card-collection (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40df14bf87fe4eb4e065fda942f953028db00c5e8148c1c1ccc2f6cf623d3611 The package rt-da-classic-card-collection was found to contain malicious code. Source: ghsa-malware...

Malicious code in rt-live-hero (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b963cc4f9c61717fb440dbd17f3897337fd7aa94a3d077bcd8307c2faf109c57 The package rt-live-hero was found to contain malicious code. Source: ghsa-malware f56b0f0c83fe7af0849099067abaa56333d2eadffeb3f8152244c74b40a706d6 A...

MAL-2026-132 Malicious code in create-react-app-lambda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dce198bea6270ee06edafb853bcde3e517778beca89073512ee6d6cf1da2304 The package create-react-app-lambda was found to contain malicious code. Source: ghsa-malware...

MAL-2026-135 Malicious code in npe-toolkit-faves (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d361a1a46446a6e7317c9f4c3db039746ceea8e599e55c309a86dba366e8ecc6 The package npe-toolkit-faves was found to contain malicious code. Source: ghsa-malware...

Malicious code in spark-ar-core-libs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1285c72e9b251b778e8914d717f3408a94460a9f9aca70a65945e4c510c5651f The package spark-ar-core-libs was found to contain malicious code. Source: ghsa-malware...

MAL-2026-147 Malicious code in spark-ar-jest-mocks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a67c582fb00bd7fd05adc5f9680fed203dd43086ab6efbcbec369bb386eaeb6f The package spark-ar-jest-mocks was found to contain malicious code. Source: ghsa-malware...

MAL-2026-133 Malicious code in language-capirca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bd955d0634b6bcda38eae58473a0e1bf135cde9c2036c680ee490ef1c4ba698 The package language-capirca was found to contain malicious code. Source: ghsa-malware 2a357e83ec0c25df41c3b48d19bcd056e7faf888bfc0a5d148ab30ac7f8884...

Malicious code in rt-global-nav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02bd8de33c5be198041c736003639439fad9b5df269d489cc4ab29b59191cab7 The package rt-global-nav was found to contain malicious code. Source: ghsa-malware e72ac5f9f497c4ba74c3c745f0cbfce94d7acf109ca98ff38f916fd8afa59e0f...

Malicious code in npe-toolkit-faves (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d361a1a46446a6e7317c9f4c3db039746ceea8e599e55c309a86dba366e8ecc6 The package npe-toolkit-faves was found to contain malicious code. Source: ghsa-malware...

MAL-2026-146 Malicious code in spark-ar-dynamic-mocks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e041fd0dd06edcd5beedc3297cfb4326de3cb34e6e854601de47b872b93f9b24 The package spark-ar-dynamic-mocks was found to contain malicious code. Source: ghsa-malware...

MAL-2026-141 Malicious code in rt-long-form-content (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aafc418ec6a49447f89597e76416b14a45ffa82d65fb393dc3bb91d1fca38ac The package rt-long-form-content was found to contain malicious code. Source: ghsa-malware...

MAL-2026-130 Malicious code in awsm-acslibs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75908418c77ed1eed9d51f2880e20a9608a49fe6e21582715517f0fa4044d349 The package awsm-acslibs was found to contain malicious code. Source: ghsa-malware 566e39645aaa10c8e2d212725d48fa1023624b811c5d98b6c4cf6354d1beba95 A...

Malicious code in tailwind-autoanimation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 239c7b556685c76e1b25bf8ec701e0688ec975920ddc409d56365b6c38b30edc The package tailwind-autoanimation was found to contain malicious code. Source: ghsa-malware...

CVE-2024-2209

A user with administrative privileges can create a compromised dll file of the same name as the original dll within the HP printer’s Firmware Update Utility FUU bundle and place it in the Microsoft Windows default downloads directory which can lead to potential arbitrary code execution...

Malicious code in wifzap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3be4876590c997a82e63ea5e8f107a5045d475a221e64ce755c478c2e10270d9 The package wifzap was found to contain malicious code. Source: ghsa-malware 1e5ec30d2613d271e1254cf809673eeac52f74766ce48c5e8c59f291e2c37b9f Any...

Malicious code in @nestor_hexom/garfield1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e97b74c49ae069dbe34f9d8305d62eed7e381a2ee48bfe60938f1b90b3ce7db The package @nestorhexom/garfield1 was found to contain malicious code. Source: ghsa-malware...

Malicious code in aog3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f4beca0cf04d27490ff5d3810c60016dd45e733468a2897a3506f07e87399f6 The package aog3 was found to contain malicious code. Source: ghsa-malware c3e51e8acaf81129062757ad75cc484c4b5c3eda53f24c45689eb1aa04fa9635 Any...

MAL-2026-119 Malicious code in klywarns (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 933b7d6c7fb14a0375e83aafab601053676b49f24851d2c8d2ca0b42f4ccd517 The package klywarns was found to contain malicious code. Source: ghsa-malware 0fd557abca883cf56c7a2f4c1b67ff5b64577d170103a99df6a39a991bcd34c1 Any...

Malicious code in wwwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00200d502997800295ce4f4ca7fe74962921193042bdddb47c91ef1bc817f61f The package wwwt was found to contain malicious code. Source: ghsa-malware 7076a3b538d3f3d8e1ae114139247fbcd223995fa82f1e63da64c9dc56dc8eb8 Any...

Malicious code in klywarn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee572661c3786dd95fb006ea7b4d99026b670f00f8e1999c1d961af6d612a2c The package klywarn was found to contain malicious code. Source: ghsa-malware f8ef3f65d8a5142e8b3a669ecd7f5b3891db0031a16d478f7b220fbb41f8d398 Any...