Malicious code in libsignal-yazxz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91d9a354d77eada4afacd4c7b884cd9b3c9487007f544b4de3068e3c3348b593 The package libsignal-yazxz was found to contain malicious code. Source: ghsa-malware 04f7491f3c5360ba3b0ea3989fbc6fabe1d113734b5f7824bbe6fe274d830f8...

Malicious code in xpack-arc-gateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 511c9b6f2c89a51bfa23febfa505e5ce2696cd6ae695ee0a7b057e194f10ca2b The package xpack-arc-gateway was found to contain malicious code. Source: ghsa-malware...

Malicious code in xpack-per-device (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f3e144fc188f6f28820784883e158f5841d1276a3eb100db4c469e45439f415 The package xpack-per-device was found to contain malicious code. Source: ghsa-malware 40c08125e60c3d43432e40679e35d49bb3fc0b9d4a3df799c45b80999f1753...

CVE-2025-59603 Out-of-bounds Write in Computer Vision

Memory Corruption when processing invalid user address with nonstandard buffer address...

CVE-2025-59603 Out-of-bounds Write in Computer Vision

Memory Corruption when processing invalid user address with nonstandard buffer address...

Malware in colorize-console

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-1119 Malicious code in @nazi-team/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe057f6743744866cb43bc64a47f0b4e814f4de1d503ea59e8b3db6b3880ad00 The package @nazi-team/baileys was found to contain malicious code. Source: ghsa-malware...

Malicious code in @sanzxcode/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15bab1682cf8fc2aaa7d7f45b24bd1bf279b1e823e8f1c59f6def120297bccc0 The package @sanzxcode/baileys was found to contain malicious code. Source: ghsa-malware...

Malicious code in ts-big-number (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 644a6ea1bec80a1e6f2dd3ee69a62602237f916e6b2877e126e18d8ef5b7f691 The package ts-big-number was found to contain malicious code. Source: ghsa-malware 490d5033b9169ec80de58a0c2bb8bdbfe435f06200e0b7cc729ce393f2449d40...

MAL-2026-1132 Malicious code in npm-doc-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15626b1cc14583363a71f0902fee65350d72abfd562b2681a322a09e484d4940 The package npm-doc-builder was found to contain malicious code. Source: ghsa-malware 5f47c0a224fe1e1e931a1964d52b91b3b92ac7ec0672507a2c143273c8d59fe...

Malware in @yaoii-bails/libsignall-node

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in chai-vest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b92343f543acb60949d618ec06160013b1536a63f3db5431a4e24b1eaac2ccae The package chai-vest was found to contain malicious code. Source: ghsa-malware 2d3a82ac6f8ebd7b7eba324f04e78d43fccef2f3ddf20c24014f4768dc50731d Any...

MAL-2026-1108 Malicious code in hapi-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90adf52f1b608bcddb8f6471e64ded19817bef1b8aa1715256182f0e7a3ab690 The package hapi-lint was found to contain malicious code. Source: ghsa-malware 388b8a57423bf6789ce0a82c22d6856663fcbc1cd2ff7ce5c6f7ef701567c19e Any...

MAL-2026-1102 Malicious code in bcryptance (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed37cfda6ab978a2daf87bc62162281d76b374965332f7a53cd4c3166db1f665 The package bcryptance was found to contain malicious code. Source: ghsa-malware 66b3b4f916ff12920a8d6b8dd76d567166e62a5592ae3a107d7aaa15fc96fe17 Any...

MAL-2026-1101 Malicious code in argonist (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2aecefee8a1b9d2c70f2c881352080e02186d102f05f82b1c9942a80e899946 The package argonist was found to contain malicious code. Source: ghsa-malware e3e27b60d79e256cf34ebd7b3f37d626812ed621fff44c3b60b08b3144c0f2db Any...

Malicious code in typoriem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e473ba3785bff62ce2994c6f09309570eea69282acc5438f015d85ca0e61cf5c The package typoriem was found to contain malicious code. Source: ghsa-malware 4dfd9fb9cb096af0fd4d1db216d08d1ae5592ef63c0c97c66a491b00ebdde43e Any...

MAL-2026-1114 Malicious code in vitetest-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6cbee8ebb202928d2c275d45908d490671a30db31920b98424c756a9a830ee2 The package vitetest-lint was found to contain malicious code. Source: ghsa-malware b3e0378c987c13cbf5c10bec3168e92580b7ed74b69325c32d255e391ba97137...

MAL-2026-1110 Malicious code in loadash-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8a6b55079998d38c9458ab6cae73e677bccc96d3965a9e6584e85c0450c2695 The package loadash-lint was found to contain malicious code. Source: ghsa-malware 9ad2a23ceb26c4b6ac051ac94acfa976eda403c11d9eaf9833d2b9206a5d2155 A...

MAL-2026-1109 Malicious code in jsnwebapptoken (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae3c045f3e6ca79915965788d10accc663e97bacc01fd6d94baa9bf781c38a0c The package jsnwebapptoken was found to contain malicious code. Source: ghsa-malware 26490b6a28e0b832aa5d386d750166e3cab2c2eb776706c9cf05fa16757758c6...

Malware in corstoken

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...