MAL-2026-6568 Malicious code in express-mocha-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01d87351be0d9f68d73ec05867e55fe5712d4885fa76c70c5ec9b003ef512825 [email protected] declares a postinstall lifecycle hook that loads the package's main module, which calls fetch against an anonymous...

eslint-commit-parser (1.0.0) potentially affected by unknown CVE via express-mocha-test (0.0.1)

express-mocha-test NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on express-mocha-test and may be impacted: - eslint-commit-parser 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2026-6568...

Malicious code in express-mocha-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01d87351be0d9f68d73ec05867e55fe5712d4885fa76c70c5ec9b003ef512825 [email protected] declares a postinstall lifecycle hook that loads the package's main module, which calls fetch against an anonymous...