MAL-2026-695 Malicious code in tsconfig-stitch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604460d36ae1ce56e73af1b1e087dca00ef2117ca7c22a6556637effff2750c9 The package tsconfig-stitch was found to contain malicious code. Source: ghsa-malware 16b55e32e715af39ca0c84de2ae4b33de360bdbe4f7448a6eb78385de90fdb9...

MAL-2026-694 Malicious code in tarax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38b8d2d32117867326488c0c11c3433f88d30b084b30dd132f3b7a9c40c5eef4 The package tarax was found to contain malicious code. Source: ghsa-malware 2f70e23fbb33630933dc47a10dfd81d1e652f73e3ed7afe4aaee5ffc2b65afa7 Any...

Malicious code in epic-admin-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53764f149897a5c5d4373d2f217da3994123f2664db8150cfcf37b474ee632db The package epic-admin-ui was found to contain malicious code. Source: ghsa-malware 34cc1c893e75c3b3e5849e74fed6d7f75ce784c9e933d878d93e773fae313305...

Malicious code in frontend-js-state-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 770e7ef9c670e6c188650363a084728f7827f49ab63d6fb9aa57f6e4cfd07dbf The package frontend-js-state-web was found to contain malicious code. Source: ghsa-malware...

MAL-2026-677 Malicious code in chai-promise-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fbc46ec5143004a3a8dbf9138d7317efd21d323b0803a9c1c6f18b73f4ef7c6 The package chai-promise-tools was found to contain malicious code. Source: ghsa-malware...

Malicious code in cheerio-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8345a6f4f7a1b718b4a830c532eb9dd1ad2d6dfcc7025f61dc440db597b39db0 The package cheerio-core was found to contain malicious code. Source: ghsa-malware bc9d76c466fb57f9a35285e94c0e9819bf5fc9e6a61d44e97e14ef0c2c4b96d0 A...

MAL-2026-666 Malicious code in transform-react-display-name (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad21ba0cb042f576642dd61d0639ac6da6cec5a468ff7b5cf0aab9164667bcb0 The package transform-react-display-name was found to contain malicious code. Source: ghsa-malware...

MAL-2026-661 Malicious code in netlify-project-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d2c95931ae7b5a6c572ebecb2cd096bd4cef37bcf61a440cbb2338062f4a836 The package netlify-project-helper was found to contain malicious code. Source: ghsa-malware...

MAL-2026-660 Malicious code in dns-troubleshoot-toolkit-xyz123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98d7149f6ef706cf3aa58e9dbf0b206aec334710d6d960fc3d1336f7b67bd56e The package dns-troubleshoot-toolkit-xyz123 was found to contain malicious code. Source: ghsa-malware...

MAL-2026-662 Malicious code in researchpoc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ee8d68b9386bf55de2d3ed033493507ee88db166ae46345172ba93d938f3a27 The package researchpoc was found to contain malicious code. Source: ghsa-malware 912631f8dc76f3b4ddae075966fd902e7ab19c0799a0cd29b0c9ece7d79cd1ce An...

MAL-2026-646 Malicious code in picking-miniapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a65c40c2b2607ac2d8df224c24ff7fcc349a20993fadc53e544289d10a24a510 The package picking-miniapp was found to contain malicious code. Source: ghsa-malware 0d2a7046f9c602dfce90cc2c44cbbd8c7d8c9749929258f31e30fa899794e23...

MAL-2026-599 Malicious code in jwt-pack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4102b59becb214e216d479ce014231e41dd264560b48ef7750c7006a3c86e7d6 The package jwt-pack was found to contain malicious code. Source: ghsa-malware c16aba10441aad949bd96fd2a349f2f59d62bf56708394fd925b432c57e2c91b Any...

Malicious code in wallet-icon-font (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a89aa304ab9d5d7a44ee3e88112f9e35b876ad03a87090749c929e882289c721 The package wallet-icon-font was found to contain malicious code. Source: ghsa-malware 319f118931c6d4b46c7bf09c9474dd23e24873b1c32f093f631cc3dccd10ec...

MAL-2026-591 Malicious code in kol7a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a81ab7bff0ce4494ac98d492444f18a8ec22e0d34f4cbaa30314de910b6a1039 The package kol7a was found to contain malicious code. Source: ghsa-malware 34930716d17313165d83a1830db1542583fbd4c6e6cf873c66cb3dfb5fbfb336 Any...

Malicious code in chai-as-extended (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1dda9ad39b1f120fc9fe5a856dbc209c2441a9c6de305ae72a35ec94ef31862 The package chai-as-extended was found to contain malicious code. Source: ghsa-malware c852649226583defd7fce57e5a82645ae50eeff8376ea06c070170b31c0a66...

Malicious code in chai-sub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a9fb8daf2c61a42d820b2e0f8a846b9f2c95ed6a1cdc4c19a7d80f3398b4a21 The package chai-sub was found to contain malicious code. Source: ghsa-malware 94d4e0fa1548915ba6f77782a735206056554990f47f65aadc5781a23474b855 Any...

Malicious code in somesomesomesome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 501ce83717dc490a4b5550820a3d811bc7a90579dbf986bfb3013d0997ae3802 The package somesomesomesome was found to contain malicious code. Source: ghsa-malware 6ac6ff72ae68c24308f36c03065bd3d4f95aea678ce410a4edb706f73499e6...

MAL-2026-570 Malicious code in lyatly-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa157e65bb67cd3f088cc4f38956e3f1b9cd202f73a212f4a92a87528eecf054 The package lyatly-utils was found to contain malicious code. Source: ghsa-malware 204e1babf8aef5194fc7046392fad75412787d49c6468fe0a18394f9bdc4e416 A...

MAL-2026-576 Malicious code in teslaone (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abb43567bb439e05bc83e1c5606aea8567e811514d05c3fa914204631fc8d762 The package teslaone was found to contain malicious code. Source: ghsa-malware fdac9959b37ff7705cf813ced160feeae858ef6da9e1ec58b3d0f33f0ceda520 Any...

Malicious code in syntax-jsx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fd1189ee316a8c3e44060564a0bbcf1fd7409333cfb2f2e5035271f94b93f27 The package syntax-jsx was found to contain malicious code. Source: ghsa-malware b04dc357cbf3cdb2e7e66b09a4ba49cd101d7f3e5be0655514403145bdbff762 Any...