MAL-2026-212 Malicious code in lyonscg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6791a364a3883b50ac1feb3bb08141b23eed486a353598186e65a4aa1983cc2c The package lyonscg was found to contain malicious code. Source: ghsa-malware 9610f0b045d1d115ea15f2ebafba8ad33767f1a997a38ed2b85b55a0c58cfdd0 Any...

Malicious code in pako-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b50aeb49929f8ce8f402d5ac0c09ee4735bc5411a45ae75dc357bfc5d18506d The package pako-js was found to contain malicious code. Source: ghsa-malware 86a948a3458aac938e35fbf5ec50b54986362543bef11c481af0f1dd3292cafd Any...

Malicious code in yunxohang11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bcda0e592de29bfcadb36b9fc15f8e9286e6a900d24e8bfc6c377e6ed2c92c1 The package yunxohang11 was found to contain malicious code. Source: ghsa-malware fb0d6761dd8d1cd805af3477c095b5c7acdd92dd5eb9b0aa1c877e65f8ded822 An...

MAL-2026-137 Malicious code in rt-da-classic-card-collection (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40df14bf87fe4eb4e065fda942f953028db00c5e8148c1c1ccc2f6cf623d3611 The package rt-da-classic-card-collection was found to contain malicious code. Source: ghsa-malware...

Malicious code in klywarn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee572661c3786dd95fb006ea7b4d99026b670f00f8e1999c1d961af6d612a2c The package klywarn was found to contain malicious code. Source: ghsa-malware f8ef3f65d8a5142e8b3a669ecd7f5b3891db0031a16d478f7b220fbb41f8d398 Any...

MAL-2026-62 Malicious code in oj-sp-common-strings (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5466d410ace77d36cbf4ad77f4ff2bec3030d7b19266a78de448ef1517b2679 The package oj-sp-common-strings was found to contain malicious code. Source: ghsa-malware...

Malicious code in nbugs-video (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98b87ac16f6f77129a82c79e3e8e1e7a2befb3846cb6824c045fe5203c3f63a3 The package nbugs-video was found to contain malicious code. Source: ghsa-malware 25902a3f4bd357713019e6b42a7e4630aafad4a9a428c91dd406d7dfa883a477 An...

MAL-2025-192629 Malicious code in flagstealerfinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64b9cc9bb0bafe61901221efe8e6c9359eef4061151cc1a35544721addc6b8f2 The package flagstealerfinal was found to contain malicious code. Source: ghsa-malware eecc837f74a9e474ce6f056e83fc505b9f1126d18a96a5eb879def906682fd...

Malicious code in tailwind-stylecss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10c71a662da2f505a840efadd0fae8fc82d44fe869c688fc1a5f4b7bf4d0a517 The package tailwind-stylecss was found to contain malicious code. Source: ghsa-malware...

Malicious code in elf-stats-aurora-cocoa-911 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ce406834ac9b9cfddc78cc4259b1887fcbd907c2a007295cd47528f8f92deae The package elf-stats-aurora-cocoa-911 was found to contain malicious code. Source: ghsa-malware...

Malicious code in pymongo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85496546788f3cab72ee1fdc5a520ccbd0b64a5a58cdd692f875ab537324c17d The package pymongo was found to contain malicious code. Source: ghsa-malware 09303fe46f98b771f0ffc2e904bd7d979c9b9339b205f41997bfe5435383f232 Any...

MAL-2025-192400 Malicious code in node-calculator-0d96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a218c7694e38a516577be3b65e74e782080f98629b0cc39516beab80562f57b The package node-calculator-0d96 was found to contain malicious code. Source: ghsa-malware...

Malicious code in elf-stats-lanternlit-snowman-834 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5ba8a53d8eaf81612c735ecd48fa5c485199e190ba2e4047f1160d5ad1d9dc The package elf-stats-lanternlit-snowman-834 was found to contain malicious code. Source: ghsa-malware...

Malicious code in internallib_v881 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88a05ce6f3ec9a36ea97ed0f3c3b1ad47d759be64104c2b2520d695f5da2c8d8 The package internallibv881 was found to contain malicious code. Source: ghsa-malware bd5f984f8edb8d28061ac400a32ca61e7ce24ab864d705ed39b96e2d69b405b...

Malicious code in @tiaanduplessis/react-progressbar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c18eaaf382ded7fad4b78f8d9f3a489ac24d4482bdb989fe5dabea0e17c36902 The package @tiaanduplessis/react-progressbar was found to contain malicious code. Source: ghsa-malware...

Malicious code in @varsityvibe/api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d2a44aba3b7acd04a01442d5b341474ac6638d772aaac1716a726e819d48611 The package @varsityvibe/api-client was found to contain malicious code. Source: ghsa-malware...

Malicious code in wenk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 209b9df1ab21f1d5e193a2a9e68ece62122dc7979592c1f21599dd018aebfff7 The package wenk was found to contain malicious code. Source: ghsa-malware 440c248dbbb7a7c4fb5db4f70f71b5dd51ca4287f3d4e83c7caceeab7aee2dd8 Any...

Malicious code in react-component-taggers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4b49756f82524cc17df7c04f674e36e56cb9c0f20a095b38dc9297e70440d73 The package react-component-taggers was found to contain malicious code. Source: ghsa-malware...

Malicious code in @trigo/atrix-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39b1328f74edf78d2b44ee487b5ea36c148e8b07a8f3bb83240f4adaa4b6c0f5 The package @trigo/atrix-soap was found to contain malicious code. Source: ghsa-malware...

Malicious code in @trigo/fsm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d47f4a2a33c66b0dd4885e14a3daac5b93ab92ff16f42af9a40c7883bc0a8fe7 The package @trigo/fsm was found to contain malicious code. Source: ghsa-malware 3a0c1d2449da835d77ebed8c99e152a8d6a2015eb1ce5d754808650e257c7776 Any...