MAL-2025-190681 Malicious code in @trigo/atrix-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e14a54095c9b7bc146d414230ec3c364d9dfb381dd4554ec3003ac116e69824 The package @trigo/atrix-postgres was found to contain malicious code. Source: ghsa-malware...

Malicious code in trigo-react-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b342d6dbb3287df2002c455ce23553f3aa118b46e447741fa840397425741076 The package trigo-react-app was found to contain malicious code. Source: ghsa-malware 11f63c9b322a04a69d7c2c875302dfe971081157a6ea2c3360e65c5e4f9f5a9...

Malicious code in @trigo/bool-expressions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6798c49edd52f5db8414de6ec11538d35d915051f5d69bb07863965971915e57 The package @trigo/bool-expressions was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190683 Malicious code in @trigo/bool-expressions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6798c49edd52f5db8414de6ec11538d35d915051f5d69bb07863965971915e57 The package @trigo/bool-expressions was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190684 Malicious code in @trigo/eslint-config-trigo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f323ad76d021234c96924ded9095572d18be962e0c71fb9cfbeb1fa43079e961 The package @trigo/eslint-config-trigo was found to contain malicious code. Source: ghsa-malware...

Malicious code in @trigo/eslint-config-trigo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f323ad76d021234c96924ded9095572d18be962e0c71fb9cfbeb1fa43079e961 The package @trigo/eslint-config-trigo was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190690 Malicious code in @trigo/trigo-hapijs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c7e81e80711c8a06b45fdcf920330f28c7da02f8080f179ee1161717bdc2a78 The package @trigo/trigo-hapijs was found to contain malicious code. Source: ghsa-malware...

Malicious code in @trigo/jsdt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff5aae2e5762514a4d2a304a2ceb36d9b895c8bd88c9a6303752aea4b078119f The package @trigo/jsdt was found to contain malicious code. Source: ghsa-malware 91f1b0ba55c42b887eade435580838bef529a7fe7a9b9fd8b3cd05ada0528cc7 An...

MAL-2025-190686 Malicious code in @trigo/jsdt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff5aae2e5762514a4d2a304a2ceb36d9b895c8bd88c9a6303752aea4b078119f The package @trigo/jsdt was found to contain malicious code. Source: ghsa-malware 91f1b0ba55c42b887eade435580838bef529a7fe7a9b9fd8b3cd05ada0528cc7 An...

Malicious code in bool-expressions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec2dea19a068cf577e39f58533ccea7e2c6b5b0c9850de785f955a8f3304e2c9 The package bool-expressions was found to contain malicious code. Source: ghsa-malware 26f720c7eb2f6cce9791d2ffe73797674e5f19882b33308cde262deaa43671...

Malicious code in @trigo/atrix-orientdb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dff5fee3398c42159c86cf250a0b25cae13f5e94b812aa6ef984b8fa8b4bd543 The package @trigo/atrix-orientdb was found to contain malicious code. Source: ghsa-malware...

Malicious code in @trigo/keycloak-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87c444dc1ce66be4f196ec79b9db852b3c8c3bcf029738b61e4471c034c96fe0 The package @trigo/keycloak-api was found to contain malicious code. Source: ghsa-malware...

Malicious code in @trigo/atrix-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8faf4ce8a59f1dddea70c86855597a55d78518cc7f1c98ae103c8be6559acf5c The package @trigo/atrix-mongoose was found to contain malicious code. Source: ghsa-malware...

Malicious code in @posthog/rrweb-snapshot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e09f740a4b99a55a685452aa412d77942e67c0de95136282343012196ed7bf41 The package @posthog/rrweb-snapshot was found to contain malicious code. Source: ghsa-malware...

Malicious code in atrix-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc27b71b0a6bedd292b899cd2cafaae36c887c103fbebc76f31189538787ffc The package atrix-mongoose was found to contain malicious code. Source: ghsa-malware a7b1ca5c62f87d30469e55f9e277026bdbedad7e3060cea2e2a80f20a87dc438...

Malicious code in @posthog/rrweb-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de65400909e7dab680997106feffcc22e5a954f60fe775e82db28e5529bacb0c The package @posthog/rrweb-utils was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190673 Malicious code in @posthog/rrweb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e7ff62f7afccd552b5eff3833fa122ace1a2f8ef6447e4b372673896063098f The package @posthog/rrweb was found to contain malicious code. Source: ghsa-malware 8278c73c0fa29817d8923864303d2e24c5a7bd038a9f8a2cae587329a3837cab...

Malicious code in zapier-platform-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91585e373be96645e987946f96de5673a2cae4dec8eabdba368acad43399eb55 The package zapier-platform-cli was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190657 Malicious code in @asyncapi/generator-helpers (npm)

@asyncapi/generator-helpers version 1.1.1 was published as part of the "Miasma RAT" software supply-chain attack campaign identifier "miasma-train-p1" that compromised several widely used @asyncapi npm packages on 2026-07-14. The malicious code was injected using whitespace hiding: it is appended...

MAL-2025-190656 Malicious code in @asyncapi/generator-components (npm)

@asyncapi/generator-components version 0.7.1 was published as part of the "Miasma RAT" software supply-chain attack campaign identifier "miasma-train-p1" that compromised several widely used @asyncapi npm packages on 2026-07-14. The malicious code was injected using whitespace hiding: it is...