MAL-2025-191451 Malicious code in @devx-commerce/plugin-discounts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74de4ea6b81994c916a9fecaea82b1fa9c5a8bf24ad75dc6c755122b821ec169 The package @devx-commerce/plugin-discounts was found to contain malicious code. Source: ghsa-malware...

Malicious code in react-native-jam-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4651dd576f405b8b0d0fd7724638dce527ed7cec18cdfc20e4b49f5cc3f9006d The package react-native-jam-icons was found to contain malicious code. Source: ghsa-malware...

Malicious code in nitroping (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab13b3f9a9100541d146c2728a90d45bfe20125de13d0f39196f03259918c1b9 No a static rule matches and no traced-code findings of installer-side attack behavior were produced for this package version. There is no evidence o...

Malicious code in nitro-kutu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c730e64b459919c937231de7e767a99ceca04f35011b70d3d95c5616092dead The package nitro-kutu was found to contain malicious code. Source: ghsa-malware e49eaa55b0b2cddde2728a2d6cfcc512771af0fa1cf78903a09e11d7b564d972 Any...

Malicious code in nitrodeploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 711c42f8e96c671fd2e390efa0c7ceee022a94baf58f2e0e18d0555a814c9ddc The package nitrodeploy was found to contain malicious code. Source: ghsa-malware bba6e4f9f8dd02145e2f4a2500158c4f7f8d197da94559a2d334cfb474974f62 An...

MAL-2025-191059 Malicious code in @trigo/atrix-swagger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86c35c2f73646bcb572d5c9cc85d640fb8acdd21da4582946a069f92f2c146d7 The package @trigo/atrix-swagger was found to contain malicious code. Source: ghsa-malware...

Malicious code in just-toasty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75e29f21c9b431c05fbc927b36672514aceaf4b5deb5ebfe79245aca026e11db The package just-toasty was found to contain malicious code. Source: ghsa-malware 2b112074d0da578cf13c8d773ea5076de4fdc7c11511d2af1910c9f63ba3783c An...

Malicious code in @relyt/mcp-server-relytone (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2613b007d67d58acec7030d26a33c30562848bf77fb10a5e9194afbe95258426 The package @relyt/mcp-server-relytone was found to contain malicious code. Source: ghsa-malware...

Malicious code in frontity-starter-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13b1b354fa335b058cf3b6af9fd24bc83609696da8937e6d103a4bdf3196ec2f The package frontity-starter-theme was found to contain malicious code. Source: ghsa-malware...

Malicious code in @lessondesk/electron-group-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac0a3fb5a82613479f65dbe89f633c1db69447886fc383477e3e4ae4a31be1ad The package @lessondesk/electron-group-api-client was found to contain malicious code. Source: ghsa-malware...

Malicious code in ai-crowl-shield (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 549c731c3344684a7d963ff1c6a038b7eff1d29bfe6e235c520bc4be03fb905b The package ai-crowl-shield was found to contain malicious code. Source: ghsa-malware b7b9897c30c2e8638c5e762b4e62bca4a8bb7c3afd0e2e6bece241bb534dd7c...

Malicious code in @varsityvibe/validation-schemas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbd2bb2effb1b3935deef38346c305be9651765d2e15c4256943b343b2a3c6f3 The package @varsityvibe/validation-schemas was found to contain malicious code. Source: ghsa-malware...

Malicious code in get-them-args (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1885f72a03b5b12ad9795b819da4d8cbd92b5985848b3f9a057afd389de5a8f8 The package get-them-args was found to contain malicious code. Source: ghsa-malware d70e3f04273d02fdaa9555197354a75aba13abe81a22763a353d47db93ce9b32...

Malicious code in gitsafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35755a0fed2224e2746cd32f8d78ac75980b4669f74e99603a5420f45712cfb9 The package gitsafe was found to contain malicious code. Source: ghsa-malware 9452f81203482947db7c464bd8a2250d768724dc16837b1e6d56b5c561b343ed Any...

Malicious code in license-o-matic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ce44db24a3d6b239882af3df83b529d0110d58680c77d244af2553ac9436085 The package license-o-matic was found to contain malicious code. Source: ghsa-malware 49c52a247d555acb52bb022b38b85269d3d53c968f4702b205402846d92a18b...

Malicious code in normal-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f3cc821206cbfa969e8f4e3472a09caf43736b8e70d4ec80ed20931b64406b8 The package normal-store was found to contain malicious code. Source: ghsa-malware 1e1d6a2537e74912ec3831bf85e49e8ba908fc28838ec60c07f7218717ba36ae A...

Malicious code in ngx-wooapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64a7e8ff946dd01747d5da4806be36032cebaf9ed78da76e88680ece90c066be The package ngx-wooapi was found to contain malicious code. Source: ghsa-malware 6bafe828b44a7293999ec4bd01079f40fff2fe77bb43d6990dc20bcbc6b83162 Any...

Malicious code in react-hook-form-persist (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8030e410dc71e9603bb5e1f5ca4c460699bd132a6e5920a1419aedd71ff2c560 The package react-hook-form-persist was found to contain malicious code. Source: ghsa-malware...

Malicious code in react-linear-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccf5203f35299ba1826e76daefdfa5e28ce387072c612234ee91afa242ba8df5 The package react-linear-loader was found to contain malicious code. Source: ghsa-malware...

Malicious code in react-native-websocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f48d8c015af60bd1c1cbe48b9005dbbde091d8abc3763d25544d978b8b133094 The package react-native-websocket was found to contain malicious code. Source: ghsa-malware...