Malicious code in redux-router-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3336c78dffab3cf95e60180dad5e67109d7de3e5dbfc888d10874c466a4088c The package redux-router-kit was found to contain malicious code. Source: ghsa-malware 6714063bc703d6750a4f6a6eedaa083372d15b7b9fa6eef3c58492ac74792b...

Malicious code in discord-bot-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776ab082f80b19df2b2fcc6ab43b00b9ca8bfa0f5ca3d9154efb2aa7de6ee7db The package discord-bot-server was found to contain malicious code. Source: ghsa-malware...

Malicious code in react-native-use-modal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08891181ddf6d5d5a9b94c1742e17b2e3aaa9ed8fd8fdab8b22fbd163e86d6bf The package react-native-use-modal was found to contain malicious code. Source: ghsa-malware...

Malicious code in @kvytech/web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 672e54c563ac24228f5896f325e61334edd27ee1fc1f8b6ea507317a67a373ff The package @kvytech/web was found to contain malicious code. Source: ghsa-malware adf7f7677776afa0f22b2829e53b9066a1af3e658c63a20dcf0d3ee55111f2ca A...

Malicious code in @posthog/rrdom (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b58f6a4822c61ea47436ea08eeb6ab0f8083fd7fed7ea3c2c42a832ab84a57ba The package @posthog/rrdom was found to contain malicious code. Source: ghsa-malware 6ad32d1af00f220489835e70f37db33a18034db715e2b750dc95639ba7e05d75...

MAL-2025-190663 Malicious code in @asyncapi/optimizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 886928a124b656faf40d1490a3b484cf0aa717d98fa9f5cd6de025e1874183e5 The package @asyncapi/optimizer was found to contain malicious code. Source: ghsa-malware...

Malicious code in @asyncapi/html-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3514238d2df6a1ffca5fe310bff1d740b15544943cdf2e67ccf90e2e05acee0c The package @asyncapi/html-template was found to contain malicious code. Source: ghsa-malware...

Malicious code in @posthog/cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57662af8290901771cf534d8b1ca05ca88dfd84054580144d934f730549a4653 The package @posthog/cli was found to contain malicious code. Source: ghsa-malware e663c40b9060088ff86ea24eec083b9b5bf8afdec2e1963895e47e5177a673d1 A...

Malicious code in @asyncapi/react-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9ebe88915a6eee986912a6566783764ff832588763eaa7b763710ed9f992299 The package @asyncapi/react-component was found to contain malicious code. Source: ghsa-malware...

Malicious code in tailwind-pulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 994e15b9c34fb68a81553df4c2a51b9412bbcc3543da29a73b6f087507c9ea4c The package tailwind-pulse was found to contain malicious code. Source: ghsa-malware ca854515da8a9c174658ca39afad56810ab87adcaa9eff2fca5043dbd8f50d04...

Malicious code in node-calculator-fa00 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4262c0c6df0bff5c948bd56a719c0cf2d00aaf9699bb1c4a7367e6054ff72844 The package node-calculator-fa00 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190562 Malicious code in node-calculator-3e62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1703fc5c6d064d50b797ea676b0a02186a5cce75afc97191661b8aaa82624543 The package node-calculator-3e62 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190560 Malicious code in mongoose-odm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f96769a7d9b829c0679f6d50c1f0c7cf119eb49605c5dc6d9b7b1a05c2b655c9 The package mongoose-odm was found to contain malicious code. Source: ghsa-malware f652b1e2a0f5c99554f46ab757d97e6038f7e5cac1d2c51a2a01851b744884f2 A...

Malicious code in application-phskck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6943455b71ad210483f41c6aad1617346d5cf05804711e7d3c08a94cd5d35084 The package application-phskck was found to contain malicious code. Source: ghsa-malware...

Malicious code in tailwind-styled-scrollbar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac987129deefb5aef175dc25c742373acfa189bdb1511017f6fff95a99e9ceb9 The package tailwind-styled-scrollbar was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190497 Malicious code in tailwindcss-setflex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d80169fb6c203bac400f4a79925a5a54eef1ef740164552a568e6e6604f9427 The package tailwindcss-setflex was found to contain malicious code. Source: ghsa-malware...

Finding Software Supply Chain Attack Paths with Logical Attack Graphs

Cyberattacks are becoming increasingly frequent and sophisticated, often exploiting the software supply chain SSC as an attack vector. Attack graphs provide a detailed representation of the sequence of events and vulnerabilities that could lead to a successful security breach in a system. MulVal ...

Malicious code in aes-core-valid-ipherv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4b3e5a270d63d751fe142a9d81d59870ee3c9bbe18403a4da5fbff3c5cce2b8 The package aes-core-valid-ipherv was found to contain malicious code. Source: ghsa-malware...

MAL-2025-149905 Malicious code in aes-core-valid-ipherv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4b3e5a270d63d751fe142a9d81d59870ee3c9bbe18403a4da5fbff3c5cce2b8 The package aes-core-valid-ipherv was found to contain malicious code. Source: ghsa-malware...

Malicious code in no-barrel-files (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d26ffac772339a03c38a909739d6648394caa3bf5f5d6052d35cb5c0ef21ac33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...