Malicious code in feature-flip (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70f38090f7d06e2ca6dedee4db704eb48de8c582ee65be6a5142487fba31d1e1 The package feature-flip was found to contain malicious code. Source: ghsa-malware 1d3a90cfc6cc14cf62f81b6f2ca995f00fbff67b1b819ba339516765de278bd2 A...

Malicious code in wenk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 209b9df1ab21f1d5e193a2a9e68ece62122dc7979592c1f21599dd018aebfff7 The package wenk was found to contain malicious code. Source: ghsa-malware 440c248dbbb7a7c4fb5db4f70f71b5dd51ca4287f3d4e83c7caceeab7aee2dd8 Any...

Malicious code in next-styled-nprogress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73288a3937c0b6e5fe20c011142795ae2f436252a77e2ab6b24dabcdb9ab7dd5 The package next-styled-nprogress was found to contain malicious code. Source: ghsa-malware...

Malicious code in react-component-taggers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4b49756f82524cc17df7c04f674e36e56cb9c0f20a095b38dc9297e70440d73 The package react-component-taggers was found to contain malicious code. Source: ghsa-malware...

Malicious code in itobuz-angular-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afed61db59aa59cee728d1b2cbe413a85ae32a192004efad9e9d126770433bdf The package itobuz-angular-auth was found to contain malicious code. Source: ghsa-malware...

Malicious code in orchestrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 732fc5c54ff5b647980dececa3d55359ca48b380f00beb4845ddfbcc9c968af4 The package orchestrix was found to contain malicious code. Source: ghsa-malware 68b12d5467e82141efec319259cd3c7331cd739fef7932534ebdf9692980ab74 Any...

Malicious code in set-nested-prop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e3ace4ffb79a5de4b7a82ae75ffdcccb6233dce2bfa2a4f32f70a3dc6921a03 The package set-nested-prop was found to contain malicious code. Source: ghsa-malware 35b0b9a8f67ec13668f93a14f45e037dc7cb3c33fa4c688e13b10a3cd2c5d3a...

Malicious code in uplandui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22f9a52e37653e2c0d85c55db9f1173d503391434bb0a2667b8ae8e57f1ed92b The package uplandui was found to contain malicious code. Source: ghsa-malware e26bf91e39b976ff5aa4107bd8140380fdceeb1de6c12a9fd9993d1ff16642aa Any...

Malicious code in @ensdomains/ens-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dee805b6610ec644c5edb2b73ca1d1da2119bb3280f182e716cfdd0aa31720fb The package @ensdomains/ens-contracts was found to contain malicious code. Source: ghsa-malware...

Malicious code in ra-data-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e18e2fda31999ba999f5629853253dd8ff93b75237944d8c2971c2f54381cc13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @ensdomains/react-ens-address (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c136b64e27be18d7c3aeebbcd6a31479adacc70efae5bbf586009180e51098a The package @ensdomains/react-ens-address was found to contain malicious code. Source: ghsa-malware...

Malicious code in open2internet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbe1cf5da09eaf98a63e880a56f10409eaec90f40d9d3a7938b4bea09aeada36 The package open2internet was found to contain malicious code. Source: ghsa-malware 7df2207057942014062d4c686449d02043f6f221e63ee8014453f995f1429200...

Malicious code in @aryanhussain/my-angular-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db21c30964586d84965ff2e4fd343156117c9f05c9ad2cfe6b1705d802862e13 The package @aryanhussain/my-angular-lib was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190770 Malicious code in dotnet-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09b8736e74e763b930253cc92ff8ee4e0b0c323b712ea201cd40c8590f618b72 The package dotnet-template was found to contain malicious code. Source: ghsa-malware 01d263352d7df50818b3c0bfb8c2c2b4c30e78dcf1feadeb4b808c2636b9c6a...

Malicious code in @posthog/plugin-contrib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afcd017c0dad0f7c8771c40b6fbc9308cf19b77a704f62856696156fb3cf156b The package @posthog/plugin-contrib was found to contain malicious code. Source: ghsa-malware...

Malicious code in zuper-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df939c793cc77c055c399930ea5b042f3873bf3e852d94c4c4fcd9388135f0b7 The package zuper-cli was found to contain malicious code. Source: ghsa-malware 303dadde5b88a63ca4d3dd7ef7a5c163dd833cd9505ac628409138e7b4a73401 Any...

Malicious code in orbit-nebula-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39053d1e21106bb38ff0f67ad92e018d3e94dd368d8a9df7df45391acd94b852 The package orbit-nebula-editor was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190753 Malicious code in @posthog/siphash (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06113daabd3bc99b8cdcc1c4641266cebd61a5f0f10df264b2f37c955a121c20 The package @posthog/siphash was found to contain malicious code. Source: ghsa-malware ed632d6b4db6b2f74973167d160350198cd9130da004e958f2f1d51d217e9c...

Malicious code in @trigo/atrix-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39b1328f74edf78d2b44ee487b5ea36c148e8b07a8f3bb83240f4adaa4b6c0f5 The package @trigo/atrix-soap was found to contain malicious code. Source: ghsa-malware...

Malicious code in @actbase/react-native-tiktok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e30674f65fae1c8cebcf4d015086a943502402cc93f3559653c406c592a62366 The package @actbase/react-native-tiktok was found to contain malicious code. Source: ghsa-malware...