Malicious code in autotel-devtools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1bce8c001a8e85b493ccdd8af1e3e57f3578d1026e6d5d147374b0a68467313 autotel-devtools ships bundled CommonJS and ESM artifacts dist/cli.cjs, dist/cli.js, dist/index.cjs, dist/index.js, dist/server/index.cjs,...

Malicious code in @forjacms/client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e53cc7a866c8a2316aec94a20aa737e6bdb4a71202c0f363e301219ae1291ac The package was found to contain malicious code or consuming dependency that contains malicious code Source: google-open-source-security...

Malicious code in autotel-tanstack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84ab5510b146ce55059a16ae8610a9ca1c6ad6fffd42ad2a9c4cb09c2d11675f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-5260 Malicious code in mountly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a392e66eff4da37e5adbd5288c1bb8da03c5348cfafacfa54aa113321e81dec5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in executable-stories-vitest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9900528338f5a1325fa66f8ebc1b72d1a24d63d708b42bbd5c54146ad7a6cbd No concrete installer-harm indicators were identified in this package version. No lifecycle-script behavior, network beacon, credential read, or...

Malicious code in dbmux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7843aa1ed1418bd452c243441bbe146ed7e023c5a1ad92b522d2429020ea94cd No evidence of installer-harming behavior was identified in [email protected]. No lifecycle scripts performing remote fetch-and-execute, no credential or...

Malicious code in awaitly-visualizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f392622f2aeb9a1cd98719278777d45ea44442e6f3979175ed8d8b6f8a0389 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in autotel-eventcatalog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a008fc4c3a9bff3d0c920364ff6e56ab62ff607408a040e7e959ad3cb461d9 No concrete installer-harm evidence was identified for this package version. No lifecycle-script droppers, credential reads, hardcoded exfiltration...

Malicious code in @ethlete/cdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 388964a1e683fdb11adf39ffe9b97f4114b9bcd9547f941d27adb4fccff22add The package was found to contain malicious code or consuming dependency that contains malicious code Source: google-open-source-security...

Malicious code in create-cf-token (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6567c748c8606e9aa7982b7eb2eb585824d9a1e29b951f50fa9c49007eb28804 No concrete installer-harm signals were observed in this version. The package name suggests a Cloudflare token helper utility, and no exfiltration,...

Malicious code in autotel-pact (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea3afdb0cdd411bf4c5c61858c6eac81b3a321fad31613a01d8e1ba80c9a6642 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-5232 Malicious code in autotel-vitest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22d23b9d854410e35b16a7058ed9bc6855b3bf548b1a3ccd79ba983de3b652e1 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-5267 Malicious code in wrangler-deploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d2085fa4916157b99799df085aa11e3d29bdb9a47f5798c85375b1bfdf8bd7e Package name wrangler-deploy is close to Cloudflare's official wrangler CLI, which raises confusion-risk concerns for developers who may install it...

MAL-2026-5257 Malicious code in executable-stories-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 763be018d834c8776be31ab5121b48eaf1172a0b48b933bc6b792484d2ac742a The package was found to contain malicious code or consuming dependency that contains malicious code Source: google-open-source-security...

MAL-2026-5234 Malicious code in awaitly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3b437ec90b9b48314676b67f08b3ab9a54e1d3b787aa17d668dd0459f2cf68b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in @vapi-ai/server-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67e1edd9922bb8b3962aad95b2bb1bfa39c3ec47651fe4863035111fc292dcfe The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-5244 Malicious code in discord-search (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aa1d4766f5f0c7701bef21a8e9391a0b851eb0ad75d711143b670f4491bd3e2 No concrete indicators of installer-side harm were observed in this package version. There is no evidence of credential reads, environment scraping,...

MAL-2026-5231 Malicious code in autotel-tanstack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84ab5510b146ce55059a16ae8610a9ca1c6ad6fffd42ad2a9c4cb09c2d11675f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-5226 Malicious code in autotel-pact (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea3afdb0cdd411bf4c5c61858c6eac81b3a321fad31613a01d8e1ba80c9a6642 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-5233 Malicious code in autotel-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f318ba7cb2f7115530a39f61c409a81a0f2bf94aa552e4a0ac6a0b21570b822 No concrete installer-harm signals were identified for this package version. Coverage of the package contents was partial, so a definitive...