Malware in @dev-blinq/cucumber_client

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @trpc-rate-limiter/hono

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @sme-ui/aoma-vevasound-metadata-lib

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-191317 Malicious code in @silgi/permission (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e79c1aefaf6282e92f02a2de0191e6d673a1750c97c6646e377d29f1006321c9 The package @silgi/permission was found to contain malicious code. Source: ghsa-malware...

Malware in @quick-start-soft/quick-remove-image-background

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @quick-start-soft/quick-markdown-print

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in react-data-to-export

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in react-data-to-export (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1955002d61deae12965aabd7f49319a8cd75b916377002d839d153e5fd19d8e6 The package react-data-to-export was found to contain malicious code. Source: ghsa-malware...

Malicious code in @oku-ui/focus-scope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b522d408beeb4d64a63002599086596cf35f82c8e022fb27d833b26ebc23d54 The package @oku-ui/focus-scope was found to contain malicious code. Source: ghsa-malware...

Malicious code in lui-vue-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1ec012cfb1edfb9761b430b0782b52888c004d3b836117ecf2e28bd16e62d5b The package lui-vue-test was found to contain malicious code. Source: ghsa-malware 390e4d5770dff6841abe0c2eb89f94237238ea21ec3811361c614593c28ee002 A...

Malicious code in @trefox/sleekshop-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5279bf872e21373d0b77ad0fdd98d44c8c59208f43a699e2517e6a5afb899c5 The package @trefox/sleekshop-js was found to contain malicious code. Source: ghsa-malware...

Malware in kinvey-flex-scripts

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @tiaanduplessis/react-progressbar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c18eaaf382ded7fad4b78f8d9f3a489ac24d4482bdb989fe5dabea0e17c36902 The package @tiaanduplessis/react-progressbar was found to contain malicious code. Source: ghsa-malware...

Malicious code in jsonsurge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09d795548cfda390ad25d33a8e7ce0d115cf76f9c2e6dedcb8459e15d41a2c72 The package jsonsurge was found to contain malicious code. Source: ghsa-malware ea90622d26555bede79ddb66877dfab50d3ff9cdb92fc4d8dbf1a8bd2c9d8497 Any...

Malware in jsonsurge

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @tiaanduplessis/json

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in inmaa-map (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14a71a1334fb3a18076752ed1d28b6fa7cc43dc4f4b612d102624e00dcdf53cb The package inmaa-map was found to contain malicious code. Source: ghsa-malware 56eac0e53cd10844280484abbd6456539bce6cd1e970a33a3707d49612ac8a88 Any...

Malicious code in ids-enterprise-ng (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02ae15f729fa23d65989e0f3873d023de175ecf54bb2b230df46861c246bf7df The package ids-enterprise-ng was found to contain malicious code. Source: ghsa-malware...

Malicious code in @pradhumngautam/common-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8984d278847eccce8a7e440093a12e26681f10e6534f163544592f20e7539c81 The package @pradhumngautam/common-app was found to contain malicious code. Source: ghsa-malware...

Malware in @osmanekrem/error-handler

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...