MAL-2026-88 Malicious code in evm-gateway-contracts-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4d7fcec6a0025a21ed0b14bdd643dc22965e7c3ccd6dee0bfa6bf3285b97aac The package evm-gateway-contracts-private was found to contain malicious code. Source: ghsa-malware...

Malicious code in evm-gateway-contracts-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4d7fcec6a0025a21ed0b14bdd643dc22965e7c3ccd6dee0bfa6bf3285b97aac The package evm-gateway-contracts-private was found to contain malicious code. Source: ghsa-malware...

@ensdomains/ccip-read-dns-gateway (=0.1.0), @ensdomains/evm-gateway (>=0.1.0-beta.0 <=0.1.0-beta.4) +1 more potentially affected by unknown CVE via @ensdomains/ccip-read-cf-worker (=0.0.1)

@ensdomains/ccip-read-cf-worker NPM version =0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @ensdomains/ccip-read-cf-worker and may be impacted: - @ensdomains/ccip-read-dns-gateway =0.1.0 - @ensdomains/evm-gateway =0.1.0-beta.0, =0.1.0-beta.2,...