MAL-2025-190990 Malicious code in react-hook-form-persist (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8030e410dc71e9603bb5e1f5ca4c460699bd132a6e5920a1419aedd71ff2c560 The package react-hook-form-persist was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191004 Malicious code in react-native-retriable-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7a3d5e2b867c8c149b9f1a79751ad5cfa9699fe24ec38d49770f9f80a37b3aa The package react-native-retriable-fetch was found to contain malicious code. Source: ghsa-malware...

Malicious code in itobuz-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fcdbc14cc1282398d0aa27b0ada7027ef96a6c2b95c3fcb0fefb926cbb45a0e The package itobuz-angular was found to contain malicious code. Source: ghsa-malware 7bb8d54de22fc55a5690d5bf3b51d9847a98a5dcf0d9836311c615cd6a30b2df...

Malicious code in hyperterm-hipster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1d8acfc5a1442200f373aaee149ff592b46d79a7bed57e8ffbc4dfa8ec01d61 The package hyperterm-hipster was found to contain malicious code. Source: ghsa-malware...

Malicious code in dont-go (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffcbe928d7ee027a099e62084462a380459f221c740f4c9532f368bc7f76d522 The package dont-go was found to contain malicious code. Source: ghsa-malware c0c93e615c56bff106ee80602d26264bb4224ac1cf87e741889b716bc63681aa Any...

Malicious code in count-it-down (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a65cd0a9c7d3b948786d786bc11cec79fe7a51f7f32772fc5c9d3b5eccddd07c The package count-it-down was found to contain malicious code. Source: ghsa-malware 937920caed3a381d9132d328f9e829bb31cca34f7711f7bb80dd27b4fa7a4b87...

Malicious code in sa-id-gen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df00f4b56b9be72c09e3f99938b4c41900b44a98e65eb46896c30209f7f0810d The package sa-id-gen was found to contain malicious code. Source: ghsa-malware 3f0da651d111107f348b8807e1fabc4c0ad1125e1af1e268745224c9d81c77fc Any...

Malicious code in set-nested-prop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e3ace4ffb79a5de4b7a82ae75ffdcccb6233dce2bfa2a4f32f70a3dc6921a03 The package set-nested-prop was found to contain malicious code. Source: ghsa-malware 35b0b9a8f67ec13668f93a14f45e037dc7cb3c33fa4c688e13b10a3cd2c5d3a...

Malicious code in svelte-autocomplete-select (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9659f91ce1f699661cdedee2d6691f0a4a515b4941511290b0082e5b662a91ea The package svelte-autocomplete-select was found to contain malicious code. Source: ghsa-malware...

Malicious code in undefsafe-typed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71757e5cdef13d215b8506dfd5b00831fc29a7a24e208472c79fd40c2abe7967 The package undefsafe-typed was found to contain malicious code. Source: ghsa-malware 1a19664890dd6d9bba23c333e1095114841ef498dec4eaa02c1bff38bc80aa4...

Malicious code in @ensdomains/ensjs-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f73575f4b186fbdf20e0a27b2bd9e1fae8839ea9f17e4648c96e6d4bf4f96da The package @ensdomains/ensjs-react was found to contain malicious code. Source: ghsa-malware...

Malicious code in @ensdomains/durin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7dcacde55c5201c366d199c830f210e3b126c9d1569c7c9a169bf40f8a3e13f The package @ensdomains/durin was found to contain malicious code. Source: ghsa-malware...

Malicious code in poper-react-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee86d01d82c77cc7c83c6d28159deba7fa26192da0ab69659d92f78f4d41cd60 The package poper-react-sdk was found to contain malicious code. Source: ghsa-malware 2c3b77a8909da7a5fe13a2fba433147468dfa75dee206eaa996325423e38244...

Malicious code in orbit-boxicons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bafb55d5f4d1082ed8b15fdeefee0570d3d86fe8b2a13bd046fd62abce85c18 The package orbit-boxicons was found to contain malicious code. Source: ghsa-malware b738b9c09b7dc6b9fd5de0bd3a6006ea4931482eaf62228b6837997f0a625b2b...

Malicious code in capacitor-plugin-purchase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ff438ebca922d9d6cb6a8a96700003065dbfc0ed65a5984edec2d5f5d37751 The package capacitor-plugin-purchase was found to contain malicious code. Source: ghsa-malware...

Malicious code in @markvivanco/app-version-checker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb3390637a7e3c1122d5f1f2417189358dec13936938bd997c1bf5949c1bb8dc The package @markvivanco/app-version-checker was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190818 Malicious code in @markvivanco/app-version-checker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb3390637a7e3c1122d5f1f2417189358dec13936938bd997c1bf5949c1bb8dc The package @markvivanco/app-version-checker was found to contain malicious code. Source: ghsa-malware...

Malicious code in @actbase/react-absolute (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed7fad65f30e84a768e6bfde1db53365d73d067672f3722603eecc021adadadd The package @actbase/react-absolute was found to contain malicious code. Source: ghsa-malware...

Malicious code in scgs-capacitor-subscribe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3fb81fa33f5db11bebf15b6af6f18a63ca129349c0d7bcaf729dc27f69d63f2 The package scgs-capacitor-subscribe was found to contain malicious code. Source: ghsa-malware...

Malicious code in lite-serper-mcp-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4004eeb497395a7e5423b056c76905cd2679f242fc432352479ee7b657383084 The package lite-serper-mcp-server was found to contain malicious code. Source: ghsa-malware...