MAL-2026-10573 Malicious code in harpoon-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc473ffcde7c9ffe6850429607ee9dd33a5cbd4cf30ad071f111693cef79045e The exported registerGracefulShutdown API — advertised in the README as a small server-helper for graceful shutdown, health, and tick profiling —...

MAL-2026-10482 Malicious code in react-icons-svgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0ccdc7a601182ae60a4f75d72cb54aef12fbe94cb209625f6f1c9be47b12096 index.js stores base64-encoded literals svgValidateKey, svgValidatePattern that decode to the shell command npm install rollup-plugin-polyfill-handle...