Malicious code in @posthog/plugin-contrib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afcd017c0dad0f7c8771c40b6fbc9308cf19b77a704f62856696156fb3cf156b The package @posthog/plugin-contrib was found to contain malicious code. Source: ghsa-malware...

Malware in test-hardhat-app

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in zuper-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df939c793cc77c055c399930ea5b042f3873bf3e852d94c4c4fcd9388135f0b7 The package zuper-cli was found to contain malicious code. Source: ghsa-malware 303dadde5b88a63ca4d3dd7ef7a5c163dd833cd9505ac628409138e7b4a73401 Any...

Malicious code in orbit-nebula-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39053d1e21106bb38ff0f67ad92e018d3e94dd368d8a9df7df45391acd94b852 The package orbit-nebula-editor was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190753 Malicious code in @posthog/siphash (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06113daabd3bc99b8cdcc1c4641266cebd61a5f0f10df264b2f37c955a121c20 The package @posthog/siphash was found to contain malicious code. Source: ghsa-malware ed632d6b4db6b2f74973167d160350198cd9130da004e958f2f1d51d217e9c...

Malicious code in @trigo/atrix-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39b1328f74edf78d2b44ee487b5ea36c148e8b07a8f3bb83240f4adaa4b6c0f5 The package @trigo/atrix-soap was found to contain malicious code. Source: ghsa-malware...

Malware in create-glee-app

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @actbase/react-native-tiktok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e30674f65fae1c8cebcf4d015086a943502402cc93f3559653c406c592a62366 The package @actbase/react-native-tiktok was found to contain malicious code. Source: ghsa-malware...

Malware in react-native-use-modal

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @posthog/nuxt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 935dd114e6907af472225a5c7fb27bf9f36b83117c1e6355228de6b837a124e2 The package @posthog/nuxt was found to contain malicious code. Source: ghsa-malware e475b17da9cc625eb62906d0f93266f2657035bdf465eda5eb2a958fbbd45357...

Malicious code in @ensdomains/solsha1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c4a8798162224fba85c25e8c01bb31790ea20f33f47fbe558eb659c197e0a4e The package @ensdomains/solsha1 was found to contain malicious code. Source: ghsa-malware...

Malware in @asyncapi/markdown-template

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @trigo/fsm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d47f4a2a33c66b0dd4885e14a3daac5b93ab92ff16f42af9a40c7883bc0a8fe7 The package @trigo/fsm was found to contain malicious code. Source: ghsa-malware 3a0c1d2449da835d77ebed8c99e152a8d6a2015eb1ce5d754808650e257c7776 Any...

Malicious code in trigo-react-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b342d6dbb3287df2002c455ce23553f3aa118b46e447741fa840397425741076 The package trigo-react-app was found to contain malicious code. Source: ghsa-malware 11f63c9b322a04a69d7c2c875302dfe971081157a6ea2c3360e65c5e4f9f5a9...

Malicious code in bool-expressions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec2dea19a068cf577e39f58533ccea7e2c6b5b0c9850de785f955a8f3304e2c9 The package bool-expressions was found to contain malicious code. Source: ghsa-malware 26f720c7eb2f6cce9791d2ffe73797674e5f19882b33308cde262deaa43671...

Malware in @trigo/atrix-orientdb

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @posthog/rrweb-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de65400909e7dab680997106feffcc22e5a954f60fe775e82db28e5529bacb0c The package @posthog/rrweb-utils was found to contain malicious code. Source: ghsa-malware...

Malware in @asyncapi/generator-components

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @asyncapi/modelina-cli

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @asyncapi/html-template

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...