MAL-2025-191450 Malicious code in @axinom/mosaic-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7168f2a1e0e25128412330dd5022d955509346523f45c453d18e9205eb38b678 The package @axinom/mosaic-cli was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191449 Malicious code in @accordproject/markdown-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa9047c76812b92b2e951857e7b8b36154b6662c2483ca7528bfa6af593c69c7 The package @accordproject/markdown-cli was found to contain malicious code. Source: ghsa-malware...

Malicious code in @medusajs/medusa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aa5b0f943792c37642fca6c2ef986192e352a69adc62d136967da06a71efe27 The package @medusajs/medusa was found to contain malicious code. Source: ghsa-malware 01bb6c10c02f2427b66ecf6036cf38726397291c4de895e6c942bf3cdf78f0...

Malicious code in @lui-ui/lui-nuxt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeaeb0138ac2e77901a8360aeeeec1038e7da06fabc4c4726a6fb2060f8d01b5 The package @lui-ui/lui-nuxt was found to contain malicious code. Source: ghsa-malware 7914345d453dc4753973e462d6f8e4cbd4d25656c98b9a22f073c9fdddb715...

MAL-2025-191451 Malicious code in @devx-commerce/plugin-discounts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74de4ea6b81994c916a9fecaea82b1fa9c5a8bf24ad75dc6c755122b821ec169 The package @devx-commerce/plugin-discounts was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191317 Malicious code in @silgi/permission (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e79c1aefaf6282e92f02a2de0191e6d673a1750c97c6646e377d29f1006321c9 The package @silgi/permission was found to contain malicious code. Source: ghsa-malware...

Malicious code in react-data-to-export (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1955002d61deae12965aabd7f49319a8cd75b916377002d839d153e5fd19d8e6 The package react-data-to-export was found to contain malicious code. Source: ghsa-malware...

Malicious code in @oku-ui/focus-scope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b522d408beeb4d64a63002599086596cf35f82c8e022fb27d833b26ebc23d54 The package @oku-ui/focus-scope was found to contain malicious code. Source: ghsa-malware...

Malicious code in lui-vue-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1ec012cfb1edfb9761b430b0782b52888c004d3b836117ecf2e28bd16e62d5b The package lui-vue-test was found to contain malicious code. Source: ghsa-malware 390e4d5770dff6841abe0c2eb89f94237238ea21ec3811361c614593c28ee002 A...

Malicious code in @trefox/sleekshop-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5279bf872e21373d0b77ad0fdd98d44c8c59208f43a699e2517e6a5afb899c5 The package @trefox/sleekshop-js was found to contain malicious code. Source: ghsa-malware...

Malicious code in @tiaanduplessis/react-progressbar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c18eaaf382ded7fad4b78f8d9f3a489ac24d4482bdb989fe5dabea0e17c36902 The package @tiaanduplessis/react-progressbar was found to contain malicious code. Source: ghsa-malware...

Malicious code in jsonsurge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09d795548cfda390ad25d33a8e7ce0d115cf76f9c2e6dedcb8459e15d41a2c72 The package jsonsurge was found to contain malicious code. Source: ghsa-malware ea90622d26555bede79ddb66877dfab50d3ff9cdb92fc4d8dbf1a8bd2c9d8497 Any...

Malicious code in inmaa-map (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14a71a1334fb3a18076752ed1d28b6fa7cc43dc4f4b612d102624e00dcdf53cb The package inmaa-map was found to contain malicious code. Source: ghsa-malware 56eac0e53cd10844280484abbd6456539bce6cd1e970a33a3707d49612ac8a88 Any...

Malicious code in ids-enterprise-ng (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02ae15f729fa23d65989e0f3873d023de175ecf54bb2b230df46861c246bf7df The package ids-enterprise-ng was found to contain malicious code. Source: ghsa-malware...

Malicious code in @pradhumngautam/common-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8984d278847eccce8a7e440093a12e26681f10e6534f163544592f20e7539c81 The package @pradhumngautam/common-app was found to contain malicious code. Source: ghsa-malware...

Malicious code in chrome-extension-downloads (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ff7b1bf73fd8b9fe68d91b5065a5cd7d46e2f659747e8c3e4a4ea436bf8a9e6 The package chrome-extension-downloads was found to contain malicious code. Source: ghsa-malware...

Malicious code in arc-cli-fc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6214b07e01a7c332d90dc0c32f225b76b8a3a8733256c42038ba1a6494a1794 The package arc-cli-fc was found to contain malicious code. Source: ghsa-malware 2b66690547df94d6cac227e7ed304d7408b2344131612b96fd60575122bf7cbe Any...

Malicious code in webpack-loader-httpfile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac614016dd648eebd83cab4f9c04585d52439a98b69d5e02694cb48119dfd96 The package webpack-loader-httpfile was found to contain malicious code. Source: ghsa-malware...

Malicious code in wallet-evm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78fe6d50f091dc471793f5970f9484103abc32d2f4dfbcb947438c32532eb1b9 The package wallet-evm was found to contain malicious code. Source: ghsa-malware 0e621631ca9ac01bf669a94fd6ae97b3a4426cf92564f95ccf205d5b8859acf9 Any...

Malicious code in @varsityvibe/api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d2a44aba3b7acd04a01442d5b341474ac6638d772aaac1716a726e819d48611 The package @varsityvibe/api-client was found to contain malicious code. Source: ghsa-malware...