MAL-2025-191023 Malicious code in tenacious-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61051d9fdf4393e5d5b5336a35ce010a5bd613ab5e8c9b1f45c9c3a409f365c5 The package tenacious-fetch was found to contain malicious code. Source: ghsa-malware 0c44fc9d1c7099876e590cd69eb0d5ff3928dcc439cfe74cce255584a3455cf...

Malicious code in upload-to-play-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86f86113dded695e7f899fe12b243d559d7cb4ddf1f6d3d67aa8318c07ed646d The package upload-to-play-store was found to contain malicious code. Source: ghsa-malware...

Malicious code in wellness-expert-ng-gallery (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba93ea812053d1ede65994da95ddd6a39a75002e9ec11387d69ca38f99980fb3 The package wellness-expert-ng-gallery was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190854 Malicious code in orbit-boxicons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bafb55d5f4d1082ed8b15fdeefee0570d3d86fe8b2a13bd046fd62abce85c18 The package orbit-boxicons was found to contain malicious code. Source: ghsa-malware b738b9c09b7dc6b9fd5de0bd3a6006ea4931482eaf62228b6837997f0a625b2b...

MAL-2025-190714 Malicious code in @asyncapi/go-watermill-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88957e3f78294013ec0e22167aec58b8de4dcc65099728725b884c54b6afa328 The package @asyncapi/go-watermill-template was found to contain malicious code. Source: ghsa-malware...

Malicious code in @asyncapi/java-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 686b2e4c1fe342d1169679b52ef96ae90aebf27fe6b9d3c84f0f9d252779ae15 The package @asyncapi/java-template was found to contain malicious code. Source: ghsa-malware...

Malicious code in @asyncapi/java-spring-cloud-stream-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b7ee33a69d9005442fb0347dfb87c303e2acd8cd146d8a85d0cecdc90f94bc3 The package @asyncapi/java-spring-cloud-stream-template was found to contain malicious code. Source: ghsa-malware...

Malicious code in redux-router-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3336c78dffab3cf95e60180dad5e67109d7de3e5dbfc888d10874c466a4088c The package redux-router-kit was found to contain malicious code. Source: ghsa-malware 6714063bc703d6750a4f6a6eedaa083372d15b7b9fa6eef3c58492ac74792b...

Malicious code in discord-bot-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776ab082f80b19df2b2fcc6ab43b00b9ca8bfa0f5ca3d9154efb2aa7de6ee7db The package discord-bot-server was found to contain malicious code. Source: ghsa-malware...

Malicious code in react-native-use-modal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08891181ddf6d5d5a9b94c1742e17b2e3aaa9ed8fd8fdab8b22fbd163e86d6bf The package react-native-use-modal was found to contain malicious code. Source: ghsa-malware...

Malicious code in @kvytech/web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 672e54c563ac24228f5896f325e61334edd27ee1fc1f8b6ea507317a67a373ff The package @kvytech/web was found to contain malicious code. Source: ghsa-malware adf7f7677776afa0f22b2829e53b9066a1af3e658c63a20dcf0d3ee55111f2ca A...

Malicious code in @posthog/rrdom (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b58f6a4822c61ea47436ea08eeb6ab0f8083fd7fed7ea3c2c42a832ab84a57ba The package @posthog/rrdom was found to contain malicious code. Source: ghsa-malware 6ad32d1af00f220489835e70f37db33a18034db715e2b750dc95639ba7e05d75...

MAL-2025-190663 Malicious code in @asyncapi/optimizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 886928a124b656faf40d1490a3b484cf0aa717d98fa9f5cd6de025e1874183e5 The package @asyncapi/optimizer was found to contain malicious code. Source: ghsa-malware...

Malicious code in @asyncapi/html-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3514238d2df6a1ffca5fe310bff1d740b15544943cdf2e67ccf90e2e05acee0c The package @asyncapi/html-template was found to contain malicious code. Source: ghsa-malware...

Malicious code in @posthog/cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57662af8290901771cf534d8b1ca05ca88dfd84054580144d934f730549a4653 The package @posthog/cli was found to contain malicious code. Source: ghsa-malware e663c40b9060088ff86ea24eec083b9b5bf8afdec2e1963895e47e5177a673d1 A...

Malicious code in @asyncapi/react-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9ebe88915a6eee986912a6566783764ff832588763eaa7b763710ed9f992299 The package @asyncapi/react-component was found to contain malicious code. Source: ghsa-malware...

Malicious code in tailwind-pulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 994e15b9c34fb68a81553df4c2a51b9412bbcc3543da29a73b6f087507c9ea4c The package tailwind-pulse was found to contain malicious code. Source: ghsa-malware ca854515da8a9c174658ca39afad56810ab87adcaa9eff2fca5043dbd8f50d04...

Malicious code in node-calculator-fa00 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4262c0c6df0bff5c948bd56a719c0cf2d00aaf9699bb1c4a7367e6054ff72844 The package node-calculator-fa00 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190562 Malicious code in node-calculator-3e62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1703fc5c6d064d50b797ea676b0a02186a5cce75afc97191661b8aaa82624543 The package node-calculator-3e62 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190560 Malicious code in mongoose-odm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f96769a7d9b829c0679f6d50c1f0c7cf119eb49605c5dc6d9b7b1a05c2b655c9 The package mongoose-odm was found to contain malicious code. Source: ghsa-malware f652b1e2a0f5c99554f46ab757d97e6038f7e5cac1d2c51a2a01851b744884f2 A...