MAL-2025-190562 Malicious code in node-calculator-3e62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1703fc5c6d064d50b797ea676b0a02186a5cce75afc97191661b8aaa82624543 The package node-calculator-3e62 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190506 Malicious code in integrator-2829 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6bcecff983d9f430d14498333405f44d090846f460508f71de76679fb2076e9 The package integrator-2829 was found to contain malicious code. Source: ghsa-malware e38f5e4a7250f8d8199f26a59e70750071a304fc729893e38b7074a1cd3ab50...

MAL-2025-190511 Malicious code in signals-embed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d5dc4270646b6f83ba4c0f5f334ec8a5cedd7b16888c9b51a7b3159ddd32ce The package signals-embed was found to contain malicious code. Source: ghsa-malware 9a80ff00c3aa6ab32518f57107ea588aa2da22e76d6db9823783032b89ca146f...

Malicious code in validator-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83e37a6017e345fd411d1589cfff26c773d65d94f231505eae6ca3a90b448c4a The package validator-node was found to contain malicious code. Source: ghsa-malware d3f7ef04f70e6978a9f771255f136d634d2907c42c7acf71a42c4c93e7e5d333...

MAL-2025-55017 Malicious code in @mts-ds/icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0112c17ea22a1384f1973813b785859e61805e29b2027b835dfa81c022bd846e The package @mts-ds/icons was found to contain malicious code. Source: ghsa-malware b51afa604dd61e1408dc95f628c00b6b379d7191214d2b77258a2a97f0cb38e4...

MAL-2025-55018 Malicious code in graphhub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f3f531a91594ad386dc82c959af2f53b1e335972b4a7a451fe0184252616c3 The package graphhub was found to contain malicious code. Source: ghsa-malware 4b0d6ee11320721cc3e65d9887c3b251b574bc7e67419fe63dedaa18b15dad9b Any...

Malicious code in @bbkkfkk/pre (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9c1f8ea16f76d6d90b7428b1448704b5b42f2db84e96945cc9c85237013060e The package @bbkkfkk/pre was found to contain malicious code. Source: ghsa-malware 18fa96a25503e48ec0ab99b483a5e7c4c8acd355e03c509295d39daf6509b21a A...

Malicious code in ve-hemi-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1ce1c8c14c652c22fede3ed26692b173255af2cebbbfe34e91d78ade7b5f9eb The package ve-hemi-actions was found to contain malicious code. Source: ghsa-malware 13edaf6e255d735724b90e45ce9e8ab5c1d6e0f0474ca23ed567341e4a08183...

MAL-2025-49074 Malicious code in xo-tracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99bf711c41656a6263989c743ebb667fca6ffbe7e749e7bacb698540cea9ffd9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49059 Malicious code in typescript-compat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0acc4ba0bcbd7793656800efb10926d4044fa65326e8bee88e9b92d2504bc668 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49000 Malicious code in express-redact (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4f7506bc61afb104333b21673f4899d6ea5e6982fcb1be7623fafcb4f5580a7 The package express-redact was found to contain malicious code. Source: ghsa-malware a883eba91191de6920dc8a2f765112365ac2835f16dd0918d3750d99a89cc9e9...

Malicious code in @jameson777/mytest8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b156e6ec35304232881859a1a11917ad7244fcea63f2683ef1a381098858d9d The package @jameson777/mytest8 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-48591 Malicious code in chalk-ipheriv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14aef23722696ac10bcadbe24bba51c3dbdc0e9b1e0aa9477a91bc90d59cd48b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bad-santa-claude (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f3ae5211cbede196c8612c8e14c54147ab8c3984a6d1d26675336e526316bae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48541 Malicious code in @jdei/codmi-figma-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fecfd138476c3c3b51878bce2a48c0b9d4ffb9f2d5476a90edeef147217eb29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in artyfact-storage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e7943603e230dc9bc1cd9f5f44133fe1b4fee90cb69929ae4b0308b61400753 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in package-f (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1deec43d176fc23dbd4cb44b3e1d4e90821cb98e441004f83c872d49ca281ac9 Any computer that has this package installed or running should be considered...

MAL-2025-48326 Malicious code in internallib_v190 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75787b9471cecb41a09915fbec6bf00bf40073c0f2da3ad342ee9fb1c83a366c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in scr-cloud-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c714f60369d28f727a675effd525b4208077e225e46026b537d7606d48708a9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48341 Malicious code in scr-cloud-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c714f60369d28f727a675effd525b4208077e225e46026b537d7606d48708a9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...