Malicious code in org.mvnpm:posthog-node (Maven)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security ea90a5928d7667bed4fa9f6effbbe6c8d3ad6521ca51ca2b01551bc02373a7d2 This package was compromised by the Sha1-Hulud: The Second Coming NPM worm. The malicious payload steals tokens and credentials and...

MAL-2025-191468 Malicious code in @lokeswari-satyanarayanan/rn-zustand-expo-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73fe3bd99e2f11ab8bb09a9086c4dca8af56372031492ed11d90f1e32a0e8f53 The package @lokeswari-satyanarayanan/rn-zustand-expo-template was found to contain malicious code. Source: google-open-source-security...

Malicious code in @voiceflow/google-dfes-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04a5078499c9ba131d593044169dbb0a8f814c085d73c4823872c41430f8fad2 The package @voiceflow/google-dfes-types was found to contain malicious code. Source: ghsa-malware...

Malicious code in @voiceflow/runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a8c6b88ad67d8ceece37df9641f6712f7047aa566957d0937eb3ca99aed10dd The package @voiceflow/runtime was found to contain malicious code. Source: ghsa-malware...

Malicious code in @oku-ui/collapsible (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3927dbf1a0475d32a8f74937162145265ff8f50b4f0352cf6400bbf9ba4b5dc1 The package @oku-ui/collapsible was found to contain malicious code. Source: google-open-source-security...

Malicious code in @livecms/nuxt-live-edit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9233c57c8a4b8ad058160ae369f3b94efba6bf89774e63f3bd4355e106009871 The package @livecms/nuxt-live-edit was found to contain malicious code. Source: google-open-source-security...

Malicious code in @livecms/live-edit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c7809db8bb669af7eb4bdecf71a153df39183ffffcccedc22eb5a123491bfd9 The package @livecms/live-edit was found to contain malicious code. Source: google-open-source-security...

Malicious code in tcsp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87eea4bd57bbebb33eeecbb27a8edc34b1d09d5914c17e5d83cf150592ca3d4f The package tcsp was found to contain malicious code. Source: ghsa-malware 9afc354e57e9ee04a013163cd035cca48961c86cae95519fb5c4882c730a2808 Any...

Malicious code in eslint-config-kinvey-flex-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2a9878339c2f4bb9dd2871f516aa58a93438018366470f0a023f02178420971 The package eslint-config-kinvey-flex-service was found to contain malicious code. Source: ghsa-malware...

Malicious code in hyper-fullfacing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9c05ea2ff38a274ac4ddcadb9206e1f6d6736e32ce536e149160e99fdd37ba7 The package hyper-fullfacing was found to contain malicious code. Source: ghsa-malware 0068679876dedee5d5fc8affa29f353019af199cd3a22493bc1e122f440b32...

MAL-2025-191379 Malicious code in @voiceflow/tsconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efbd7f8570f0ab8bcfa431a779045675f5f34e240bf2de966c5cd6b468f5a107 The package @voiceflow/tsconfig was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191387 Malicious code in @voiceflow/widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac19bf504aadbfdca19efac5f7d258c14c541a1f9747324e00da8220b0b1d785 The package @voiceflow/widget was found to contain malicious code. Source: google-open-source-security...

MAL-2025-191398 Malicious code in my-saeed-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d222a4cf76e8e0efb6de33ce203327546a24a125a7b6fa1e70bf04566d4d1dd The package my-saeed-lib was found to contain malicious code. Source: ghsa-malware c835d59a9317a70385922241ebb4aa8a34025c5cef3f3c22e03df1fc6f22042f A...

MAL-2025-191332 Malicious code in @voiceflow/anthropic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5894ea8ba7ea0e9636e873dae07eb97fdcf83510f4e7a28b23f1d0b2e0a0afe0 The package @voiceflow/anthropic was found to contain malicious code. Source: google-open-source-security...

MAL-2025-191342 Malicious code in @voiceflow/dependency-cruiser-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f310f0649a09ab3e8f8ca155d2067e1f39ad9ac40a987851fd0dd352ffc268fe The package @voiceflow/dependency-cruiser-config was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191394 Malicious code in drop-events-on-property-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ec0ea7d31f1e0fec815bf2b3893bc6e320c5c3e309b43d22130d5af8a52a033 The package drop-events-on-property-plugin was found to contain malicious code. Source: google-open-source-security...

MAL-2025-191298 Malicious code in @posthog/postgres-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10be24eebbc464a61788d5c151ce03171d4abe4b1cd7f27972fef642fc46deda The package @posthog/postgres-plugin was found to contain malicious code. Source: google-open-source-security...

MAL-2025-191179 Malicious code in @afetcan/api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0a79aa802450fc62bcdf8bdb70d6619752f6db790e68472e80016d5893111ba The package @afetcan/api was found to contain malicious code. Source: google-open-source-security...

MAL-2025-191401 Malicious code in pkg-readme (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc479ddf04c9b4dccdd1b190ab6a553b8b70b35dd010db9a2f6facee0990c78 The package pkg-readme was found to contain malicious code. Source: ghsa-malware 1367f46db577db5123a8d208e0f5d172747a39e623e7c33db0a7e240d28f9d2a Any...

MAL-2025-191240 Malicious code in @kvytech/medusa-plugin-promotion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2a466e1f572169367ae23de09311bd07d68a2fb1a6b31c6e3347a8f7305f2e5 The package @kvytech/medusa-plugin-promotion was found to contain malicious code. Source: ghsa-malware...