MAL-2025-190827 Malicious code in @strapbuild/react-native-perspective-image-cropper-poojan31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4df709f4751b17fa902a24e7675645161e81f578925bc71947858076b163d9d5 The package @strapbuild/react-native-perspective-image-cropper-poojan31 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190832 Malicious code in axios-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c726ee1f437e2d41e6315304248feeb9214b2418b2a9662d27e0adec579c454 The package axios-builder was found to contain malicious code. Source: ghsa-malware f8ff42a488c5cabfb90c3ab47735ddb22959b3dfe23243360ac54c4db3da54af...

MAL-2025-190834 Malicious code in calc-loan-interest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ea88e110d3bd8cf01c5ec0212632ca3ca8217353b942219b51a9ba53887fb43 The package calc-loan-interest was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190849 Malicious code in medusa-plugin-announcement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9b07264455976108e9b10007ffccea47d12a9b8642114b28082c0d80130c851 The package medusa-plugin-announcement was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190814 Malicious code in @ensdomains/unruggable-gateways (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19161096da8bc9f3514ff35b262f9d1f1683b0f54a01041afb0993d5d5268f9e The package @ensdomains/unruggable-gateways was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190855 Malicious code in orbit-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34962586ab6b1dda417a71f777d710ef91eadfbdaf81c32d957e9ed8163e4a3e The package orbit-soap was found to contain malicious code. Source: ghsa-malware 3907aa266d3bd43dbf2a9fdfa8673313f17448ecfcd226e4d4a3e5c572d20662 Any...

MAL-2025-190826 Malicious code in @strapbuild/react-native-perspective-image-cropper-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e2f74d9d1d21777c83aa98d57c78a19a6161665a8af16c87f380f0d5b8139e The package @strapbuild/react-native-perspective-image-cropper-2 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190851 Malicious code in medusa-plugin-zalopay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3c2a2c7cda991bd113cf7b4cd391451e22bc26d4df3fa7a96669ad4c7d1c219 The package medusa-plugin-zalopay was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190824 Malicious code in @quick-start-soft/quick-task-refine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b916ec147b8ea7421a203e04aee7554ffafacffd6a0aa576031a36f8773dc41 The package @quick-start-soft/quick-task-refine was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190799 Malicious code in @asyncapi/keeper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04b1620523a3ce8e3a6d91cc4b532723797a0cc56a36e303774caf14ef1acffd The package @asyncapi/keeper was found to contain malicious code. Source: ghsa-malware b4de90c140688e48a7bd263f6ce83227887405e7322154faa001d6bdf787cd...

MAL-2025-190804 Malicious code in @ensdomains/dnssec-oracle-anchors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b164c0fb4c77df7a6c083be92efc82f833aaa660d50fbb1a0eea26b2388c65a6 The package @ensdomains/dnssec-oracle-anchors was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190805 Malicious code in @ensdomains/ens-archived-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c494307ab46ed2af70af69daaf50ee6ce9bee9d65e2f9610c692e97db58c7526 The package @ensdomains/ens-archived-contracts was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190846 Malicious code in go-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de2b1faf83824d6073ab908373d9704ee8fb7cb05322cfb6cedc079603455f10 The package go-template was found to contain malicious code. Source: ghsa-malware 508770194aad24fbaa79597bcc1a3f618b9397f2ad3f6fd1dc06c5dc0938a6ee An...

MAL-2025-190758 Malicious code in @strapbuild/react-native-perspective-image-cropper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba56315cb27098d62accc35eb40d71fa885864ff9cf34271f632a07460df65ac The package @strapbuild/react-native-perspective-image-cropper was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190775 Malicious code in manual-billing-system-miniapp-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fbe247429665dfb3140f405fe662a2c53590e8be9cfeca89a868c826a4fe04f The package manual-billing-system-miniapp-api was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190774 Malicious code in korea-administrative-area-geo-json-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3e5fc5ac9320c5c6de500011362abf25bbbebf4427f272bef9a58fa0d5c0f03 The package korea-administrative-area-geo-json-util was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190706 Malicious code in @actbase/css-to-react-native-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19bb30e7704436db9e7ac671839931de450cdcde7408b8c151337c6958433836 The package @actbase/css-to-react-native-transform was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190741 Malicious code in @ensdomains/vite-plugin-i18next-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 473280de7d29dd017bfa50f0826a0aa810d204a6949fe49d6753ff28ff61d505 The package @ensdomains/vite-plugin-i18next-loader was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190707 Malicious code in @actbase/node-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0017bb31e0f352229b8a7afc7305701c64b60033a69ccfec390385c507c6d85 The package @actbase/node-server was found to contain malicious code. Source: ghsa-malware...

CVE-2025-65503

Use after free in endpoint destructors in Redboltz asyncmqtt 10.2.5 allows local users to cause a denial of service via triggering SSL initialization failure that results in incorrect destruction order between iocontext and endpoint objects...