MAL-2025-49383 Malicious code in rce-poc-test-honor-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 216f60aec8616ca96e607a879e30241ea807ed24fcb4b775afc5b8ef4d3f4a09 The package rce-poc-test-honor-mcp was found to contain malicious code. Source: ghsa-malware...

Malicious code in xss-payload-all (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c825aada16e0da858a5e9f4b836a1c7a9e4b6e2727d285ff60e8634deb99848 The package xss-payload-all was found to contain malicious code. Source: ghsa-malware bf42864a16e802aec4ff8ec23d71f82c73ac809e44e56a55bcec163b05f539a...

Malicious code in rbx-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d4ecda15069813165d8d13bb57d1f3897a9cf9ff78f99e9351d6f70718652a0 The package rbx-handler was found to contain malicious code. Source: ghsa-malware f13b7df25e6160dc2918d838b4d1f1823318fa34c5e29990e87a57a293c0e0d9 An...

MAL-2025-49373 Malicious code in rbx-api-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adcdceb1d10e901a9b6e6666de7760a70b8a30d2e4f4230f37f089714d62227d The package rbx-api-ts was found to contain malicious code. Source: ghsa-malware 40b2b2f44e007e32202c67b4c33caf98936df9a60df7dc60e7163078fff8b7d3 Any...

MAL-2025-49375 Malicious code in rbx-reader-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26b8d14a0bd74bf3ed3daec6aa05cdff66d71efb652ea3727f5eee4812f39293 The package rbx-reader-ts was found to contain malicious code. Source: ghsa-malware e2cc8e418629e96adc1f49efc1c9e67a21f94eb0594d1e6a66ce25023f0afcc4...

Malicious code in react-tmedia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2561617d960be4ee063460a87fe4cded553ec3c3f0258fcaae75a27aa92de3b The package react-tmedia was found to contain malicious code. Source: ghsa-malware eb8db46193d662b789371d3c7670652c9d9dca288f0b99daba2791a3410613cf A...

MAL-2025-49358 Malicious code in bcryptjs-node-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f621b58cc468b09e5963a64bef46446818cfa742ca51366a9e256bdb6299b8 The package bcryptjs-node-js was found to contain malicious code. Source: ghsa-malware 3b410282355b8584d4b9c012154aed901dfd650f212d1a2a942d901ae693f3...

Malicious code in bcryptjs-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0be16faac6783f82014ca8cf99ad85fccf1d5e8a161d5b601a50ae9d6376727 The package bcryptjs-node was found to contain malicious code. Source: ghsa-malware 9ed37910e4f94c2d5eb3552347636ce0b38ce92c42cb7abf643ca2cffd60e8af...

Malicious code in jito-prop-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2a17a99c383a4fa9a1c8e550e6f511297b7600b954644d178923e8073d3a9c5 The package jito-prop-exec was found to contain malicious code. Source: ghsa-malware 5a0c01062e391db56237859b73d9b8bbc69c940292f96aed7a72b1f2f7dd7d09...

Malicious code in tailwind-fa-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a756b361c16672e64c2930a0808516a83e75a9b441f30ac8e9e933a2b0a89858 The package tailwind-fa-bridge was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49354 Malicious code in tailwind-fa-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a756b361c16672e64c2930a0808516a83e75a9b441f30ac8e9e933a2b0a89858 The package tailwind-fa-bridge was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49321 Malicious code in axis-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09aeea2ea73dbe2f884c0231d608d337880bb8bfd99f38837bb012f8f952eba1 The package axis-tools was found to contain malicious code. Source: ghsa-malware aa8f4e19cbedf81f11461e5e9017bd02d7135a5f126ed59b58b3669d6a7c8156 Any...

Malicious code in orderly-network-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec35c18a8349d3d2dd52575ffa769fa141be9d1c7b99b0a3e95d994af6acb495 The package orderly-network-config was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49328 Malicious code in parallel-coordinates (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a6532ff0ec9ac1daec9c21c05c508de189c1f5d5012fc6b8aee4feb9ce2b43 The package parallel-coordinates was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49329 Malicious code in react-ui-animates (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faea1c84618f620702405ada06f82a0352d57b6f8544e33b87cde589284b5ef1 The package react-ui-animates was found to contain malicious code. Source: ghsa-malware...

Malicious code in icon-react-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad97a4843ca8933070ecec7c05bf536be6b6a80d87925026a6b7be938fd264f7 The package icon-react-fork was found to contain malicious code. Source: ghsa-malware 32d3f4313eda9d40aff4d3624d6f7f534df05b45f0f282fab8e0f8211c1a38c...

Malicious code in fork-spoon-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 230cc34701f276fd7c72ba75f580a0615bc12a6720dd3bedb7d98b99b24651c5 The package fork-spoon-fork was found to contain malicious code. Source: ghsa-malware 0e5798d27152d0cd13a2c05a43a6ffd1ec5ee70023bbffc173181ec3ecee8e3...

MAL-2025-49254 Malicious code in cursor-ai-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9cbd361c113d7d9176c54442b50ef54297ec337dc805f6ec21d0e275b187d05 The package cursor-ai-fork was found to contain malicious code. Source: ghsa-malware 77f90740d80a74fd38f9815f98257a414e78aa314b00b1a75f4d56352d972811...

MAL-2025-49272 Malicious code in telegram-bot-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c6146ccba5593f3f123cbe20b94fd9df9d168c3e4614e5bf93a1fdd8e96fc7d The package telegram-bot-starter was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49271 Malicious code in telegram-bot-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 850fdb1c7d5ecd92e025e8b58e36afd28fae3e1d4127151ee4e3ee8e634d9b0c The package telegram-bot-start was found to contain malicious code. Source: ghsa-malware...