MAL-2026-194 Malicious code in mui7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 229ec4207198813ec81b334b0a5ac72c964258b80165cda21a1c25564819ad83 The package mui7 was found to contain malicious code. Source: ghsa-malware 81251ad548d890c9ade683aab8ffd6fb9d307a5e8bf6359d3b31f91080d26e8e Any...

Malicious code in oe-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c53c7a0c82b0a316878dbbd5767381ca0ef874192a308eb5001b953915dc816b The package oe-oauth was found to contain malicious code. Source: ghsa-malware 412d8ae25ded16fb507e7d120484a172ece322758c56fb4da2a6a7cd79b5be49 Any...

MAL-2026-202 Malicious code in wac-relay-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6742f4abdd6851c0f1a4f003f84ac7dca306f8b29a0bf39ad8e41b12a9680d32 The package wac-relay-runtime was found to contain malicious code. Source: ghsa-malware...

Malicious code in mui7icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a78d5005068e75f9e5cc23616c1aa5a52bded7585e24cac270cdc0623c54de8 The package mui7icons was found to contain malicious code. Source: ghsa-malware bb725c3a171c7afa85beb301d5067750d7d43a1cd8f3dc836c4296dda3cd283b Any...

MAL-2026-195 Malicious code in mui7icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a78d5005068e75f9e5cc23616c1aa5a52bded7585e24cac270cdc0623c54de8 The package mui7icons was found to contain malicious code. Source: ghsa-malware bb725c3a171c7afa85beb301d5067750d7d43a1cd8f3dc836c4296dda3cd283b Any...

Malicious code in vet-bones (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3ce97e3af4cf9c82b0a51f4b693273ac59c6b1357b445b5613fbdcf7edec9a9 The package vet-bones was found to contain malicious code. Source: ghsa-malware 963e426141db06e18a04d497aed8ab05c8c6acfc76e6570d7c4a0bd2d81d7658 Any...

Malicious code in wac-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0642cdcd4abbaddae08f167b77852150ee23b0b9b363fd7495df86b998a43533 The package wac-react was found to contain malicious code. Source: ghsa-malware 0ccbbe4984cb82022ab6dafda5531ee164a8b7554a4796e3936432f0e17bc8d6 Any...

Malicious code in wac-react-dom (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3574245c1ec6c0d46b337b9600a38046ef129489605e5e108fcaaed753d50c9 The package wac-react-dom was found to contain malicious code. Source: ghsa-malware 483203b2478e5e472201a6f6d8efef0353ca7fb2ccf429996cc59e2574b2e497...

MAL-2026-201 Malicious code in wac-react-dom (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3574245c1ec6c0d46b337b9600a38046ef129489605e5e108fcaaed753d50c9 The package wac-react-dom was found to contain malicious code. Source: ghsa-malware 483203b2478e5e472201a6f6d8efef0353ca7fb2ccf429996cc59e2574b2e497...

Malicious code in resto_ui_components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd3404a7cf3642d3e49538ae488a44a564dc5dd94102302ab33814b62e4427a The package restouicomponents was found to contain malicious code. Source: ghsa-malware...

Malicious code in shopping-cart-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a35497d79077eb5f8f79659d420f79568f9fcf905b9ab2f2cceb043eb6eba574 The package shopping-cart-service was found to contain malicious code. Source: ghsa-malware...

MAL-2026-168 Malicious code in @zuora-marketing/linting (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddcfd1151af868e694a4a79307ce1284331ad88b8ff631651f3fd2c47fbf342a The package @zuora-marketing/linting was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in @kyriba/mf-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa1b2dd3479a677d975d11f8fe29e2cb24cbcc3a90c05081fa1632822c7c2f5a The package @kyriba/mf-kit was found to contain malicious code. Source: ghsa-malware 5316d385b586e69d62f54165ad5c9a973bf0bdfc3ef7023a0f7f53c784bb7131...

MAL-2026-165 Malicious code in @kyriba/mf-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa1b2dd3479a677d975d11f8fe29e2cb24cbcc3a90c05081fa1632822c7c2f5a The package @kyriba/mf-kit was found to contain malicious code. Source: ghsa-malware 5316d385b586e69d62f54165ad5c9a973bf0bdfc3ef7023a0f7f53c784bb7131...

Malicious code in @kyriba/ui-workspace (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b7e92deb9c473f963b37b51df844bbea3a31ce650797efd9e410e27219be1f2 The package @kyriba/ui-workspace was found to contain malicious code. Source: ghsa-malware...

MAL-2026-166 Malicious code in @kyriba/ui-workspace (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b7e92deb9c473f963b37b51df844bbea3a31ce650797efd9e410e27219be1f2 The package @kyriba/ui-workspace was found to contain malicious code. Source: ghsa-malware...

MAL-2026-164 Malicious code in @kyriba/data-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71d5e12cfb929e029a7fcb5f87399a07fa074d8e30025eb93914120e703f142a The package @kyriba/data-frontend was found to contain malicious code. Source: ghsa-malware...

MAL-2026-163 Malicious code in do-not-install-this-package-002 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 dc0f1ed2645f37e4b8df59ccca64288a02f6cc07009489c54565dfc5b0089f19 During installation, the package exfiltrates env variables and data from different process memory to a remote location --- Category: MALICIOUS - The campaign h...

Malicious code in @testfeii/hallo-word (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df29a7d1af34a39e40a4928590c45f4d6544245d86b34e3a8f1266398bd2b17 The package @testfeii/hallo-word was found to contain malicious code. Source: ghsa-malware...

Malicious code in kmeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0007533264dfce09777a32ebaa374e6f78f7af5ea6d8df57d7a92ce22590a09e The package kmeet was found to contain malicious code. Source: ossf-package-analysis 6d1b109e5fb22408addfc93b1e1c172970312ae04f4b194bf5156abb941742ff...