MAL-2025-191090 Malicious code in fat-fingered (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b5e127ac8099a8bee6fc42a5c3911a275384f00af4cd97082dde08a2bf2704f The package fat-fingered was found to contain malicious code. Source: ghsa-malware 77d5770972318f63a00eb2722c056f2e554e8970abd97f94cba9a3dde292a8d8 A...

Liferay Portal JSON Web Services Detected

This is an informational plugin to inform the user that the scanner has detected that the target Liferay instance publicly exposes the JSON web services. No source data...

MAL-2025-190546 Malicious code in node-calculator-feea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcb1a64b7f2fc6b55b2801e47c270a7f2ec6e8f80ba3c0689b044d9621131031 The package node-calculator-feea was found to contain malicious code...

Malicious code in node-calculator-215d (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3198d6c12dadf6d9c769d208f18cd0ad966ccffa92b0db40b2cb25f0fb9335a The package node-calculator-215d was found to contain malicious code...

EUVD-2025-112169

Malicious code in jovian-cypress-jest-janus npm...

MAL-2025-141066 Malicious code in configstore-titan-spica-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47d4323dfe5c95c01f1b85cbb867e70a807bdfd1bf229b6f11b8e1feca94fae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-97572

Malicious code in joni-ongol-ongol15-riris npm...

EUVD-2025-95693

Malicious code in putra-gudeg81-breki npm...

EUVD-2025-93985

Malicious code in wibowo-ongol-ongol87-breki npm...

EUVD-2025-88790

Malicious code in sinta-sroto91-miaww npm...

MAL-2025-114441 Malicious code in hadi-soto2-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c2eeea9b3f9cbe43183665828877633d60e843ca314e35623d2d7c8ae5e7308 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-72382

Malicious code in hoverflyorange-43-tisubasah npm...

Malicious code in fitri-lontong16-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd30495180a9d419c7833916edf1b845f410c9bce7e0cbebf60d7b39a64dbffd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-86271

Malicious code in erick-esdoger12-miaww npm...

EUVD-2025-67425

Malicious code in qori-keripik21-miaww npm...

EUVD-2025-41240

Malicious code in dian-esdoger12-breki npm...

MAL-2025-49648 Malicious code in yanti-lengko23-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8756200213cf37e7d92773aead9042e833c4ecef639199aa35532f44d818749d The package yanti-lengko23-riris was found to contain malicious code...

Malicious code in zaki-martabak61-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67dd812c641b8b422c689b27db6eb77ed230b13d46cb1670a11f7f085e8c24ff The package zaki-martabak61-breki was found to contain malicious code...

Malicious code in finalmoyloyt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55125b342b47dcefababdb74478820644fd9f4e19a428dd6e84e7af021cd1bf1 The package finalmoyloyt was found to contain malicious code...

MAL-2025-49293 Malicious code in @dvargas135/gunpowder-ghost (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400dea6d2b5bfe1ff00f2fe709cb1ef33f393894e93bff155b32021682d1e571 The package @dvargas135/gunpowder-ghost was found to contain malicious code...