MAL-2025-190805 Malicious code in @ensdomains/ens-archived-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c494307ab46ed2af70af69daaf50ee6ce9bee9d65e2f9610c692e97db58c7526 The package @ensdomains/ens-archived-contracts was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190846 Malicious code in go-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de2b1faf83824d6073ab908373d9704ee8fb7cb05322cfb6cedc079603455f10 The package go-template was found to contain malicious code. Source: ghsa-malware 508770194aad24fbaa79597bcc1a3f618b9397f2ad3f6fd1dc06c5dc0938a6ee An...

MAL-2025-190758 Malicious code in @strapbuild/react-native-perspective-image-cropper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba56315cb27098d62accc35eb40d71fa885864ff9cf34271f632a07460df65ac The package @strapbuild/react-native-perspective-image-cropper was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190775 Malicious code in manual-billing-system-miniapp-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fbe247429665dfb3140f405fe662a2c53590e8be9cfeca89a868c826a4fe04f The package manual-billing-system-miniapp-api was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190774 Malicious code in korea-administrative-area-geo-json-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3e5fc5ac9320c5c6de500011362abf25bbbebf4427f272bef9a58fa0d5c0f03 The package korea-administrative-area-geo-json-util was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190706 Malicious code in @actbase/css-to-react-native-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19bb30e7704436db9e7ac671839931de450cdcde7408b8c151337c6958433836 The package @actbase/css-to-react-native-transform was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190741 Malicious code in @ensdomains/vite-plugin-i18next-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 473280de7d29dd017bfa50f0826a0aa810d204a6949fe49d6753ff28ff61d505 The package @ensdomains/vite-plugin-i18next-loader was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190707 Malicious code in @actbase/node-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0017bb31e0f352229b8a7afc7305701c64b60033a69ccfec390385c507c6d85 The package @actbase/node-server was found to contain malicious code. Source: ghsa-malware...

CVE-2025-65503

Use after free in endpoint destructors in Redboltz asyncmqtt 10.2.5 allows local users to cause a denial of service via triggering SSL initialization failure that results in incorrect destruction order between iocontext and endpoint objects...

MAL-2025-190713 Malicious code in @aryanhussain/my-angular-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db21c30964586d84965ff2e4fd343156117c9f05c9ad2cfe6b1705d802862e13 The package @aryanhussain/my-angular-lib was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190763 Malicious code in @zapier/eslint-plugin-zapier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4f3af0dfab295d120b932902816e065f092b48671909a971a2994cb3cb5afd6 The package @zapier/eslint-plugin-zapier was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190766 Malicious code in capacitor-purchase-history (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ef54df7bce3add5d55de2f91510b75ffc757c47626010c4f44b59ef8f08242c The package capacitor-purchase-history was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190715 Malicious code in @asyncapi/java-spring-cloud-stream-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b7ee33a69d9005442fb0347dfb87c303e2acd8cd146d8a85d0cecdc90f94bc3 The package @asyncapi/java-spring-cloud-stream-template was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190771 Malicious code in esbuild-plugin-httpfile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efc9c8640b4324e3d5e06e51fa01e3029117ab9121c0baa55b1f81b1b73019a8 The package esbuild-plugin-httpfile was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190722 Malicious code in @ensdomains/blacklist (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 885b443e4475d3f0306ce0899d0afd3b9190193bac49fa411c41328695e05a46 The package @ensdomains/blacklist was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190733 Malicious code in @ensdomains/hardhat-chai-matchers-viem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1999f51becf9c74a78a05fda5c53906b196ac72e115d0555b88ff2dc855adca5 The package @ensdomains/hardhat-chai-matchers-viem was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190788 Malicious code in zapier-async-storage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03106802713a8738ac15728a0fdb19774a74ac3ae3aa76b501b8d4b08e8a7e5e The package zapier-async-storage was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190761 Malicious code in @zapier/babel-preset-zapier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9189b0afaf74836818d1b081a853ae3fcc6193845bdbd74338171e535fd1391 The package @zapier/babel-preset-zapier was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190728 Malicious code in @ensdomains/dnssecoraclejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d8f72e47dba9adfd21c5f526d40d193f0435c04c45da2057d73878073ba79c4 The package @ensdomains/dnssecoraclejs was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190785 Malicious code in token.js-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c0ea628a23a78a7ef88dc4301ffbaf6515d00c92b331d0dfe518b6156d6cf01 The package token.js-fork was found to contain malicious code. Source: ghsa-malware c175fb9f3c6376f85f6e9b597aeaa381892983e4348984c54354174cca12f8a2...