MAL-2025-191416 Malicious code in rediff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c86aaca91ce5f75365f233d2d0448fcfe25ce792ebc203487993fdbed70e5c68 The package rediff was found to contain malicious code. Source: ghsa-malware 6f58213ac5761ffaaca614a73e2f1b9927e9f4b25f9dc8b3f64258411281ce41 Any...

Malicious code in m25-transaction-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e91218f5eaff53a78f8a4c20f4090ee4c99958d5784c54a3ee2280d00658643 The package m25-transaction-utils was found to contain malicious code. Source: ghsa-malware...

Malicious code in insomnia-plugin-random-pick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8717488a1afc3be853313a0f8f243fa748188c0b321d8c9096182cf59bfbb1ed The package insomnia-plugin-random-pick was found to contain malicious code. Source: ghsa-malware...

Malicious code in @osmanekrem/bmad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 944b38bf9ed936861ce98cafc711d3d8a8b9cacdc551e5ea1142ea4143cb60aa The package @osmanekrem/bmad was found to contain malicious code. Source: ghsa-malware 4ec958dd0f9ea68f75efc0bfd5d3c3af3b068c9bd15c3a1806453debabae0a...

Malicious code in @ntnx/t (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2865f9cc29095e84318d97631a2242512c5361ad8d820cd6212a8cb06417c92a The package @ntnx/t was found to contain malicious code. Source: ghsa-malware a56d53a5cf562204b62c1283f7cc997da367c0eb1cd09c913dcedbe5469bff6e Any...

Malicious code in bun-plugin-httpfile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae0f656e3adcef8f66c427a2cc68a9a0e99581c1a429ab204f9451c59dab21a1 The package bun-plugin-httpfile was found to contain malicious code. Source: ghsa-malware...

Malicious code in @lessondesk/schoolbus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c14a4cce7a095ba23b1ec9898ad654afc8e736c94cf26a1b8c15aa123973fe9 The package @lessondesk/schoolbus was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191067 Malicious code in avvvatars-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d0177ed2908c06ff8f5fa7cf686ba026f4f225b8c4abe0678cbd28c4962b8fc The package avvvatars-vue was found to contain malicious code. Source: ghsa-malware e5704fc14aead5570b7b1abc795002ea942c9f791057989143dbe27384b20259...

Malicious code in @varsityvibe/api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d2a44aba3b7acd04a01442d5b341474ac6638d772aaac1716a726e819d48611 The package @varsityvibe/api-client was found to contain malicious code. Source: ghsa-malware...

Malicious code in flatten-unflatten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96678bbed20be5d500dc65bda769b41f7d3666a18c8a76262aca5ed79ef584fd The package flatten-unflatten was found to contain malicious code. Source: ghsa-malware...

Malicious code in fat-fingered (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b5e127ac8099a8bee6fc42a5c3911a275384f00af4cd97082dde08a2bf2704f The package fat-fingered was found to contain malicious code. Source: ghsa-malware 77d5770972318f63a00eb2722c056f2e554e8970abd97f94cba9a3dde292a8d8 A...

Malicious code in wenk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 209b9df1ab21f1d5e193a2a9e68ece62122dc7979592c1f21599dd018aebfff7 The package wenk was found to contain malicious code. Source: ghsa-malware 440c248dbbb7a7c4fb5db4f70f71b5dd51ca4287f3d4e83c7caceeab7aee2dd8 Any...

Malicious code in lint-staged-imagemin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8cfbe33b97d4e3997d348c9532c834715e755ea1d28a6b30f2276209d4f45db The package lint-staged-imagemin was found to contain malicious code. Source: ghsa-malware...

Malicious code in zuper-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4cc2065f0dd8abd271cf1dd9577497f7fb19724820c50925509236093e73567 The package zuper-sdk was found to contain malicious code. Source: ghsa-malware c84dbb98c137f6b50ce20f0cae6113a3d32f5cd6910583273c4d11d4966d105c Any...

Malicious code in ngx-useful-swiper-prosenjit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 285834c76af1324a80d9544c32d23970dce50b43ab7fb2d3ada984f7537ff5d2 The package ngx-useful-swiper-prosenjit was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190989 Malicious code in react-component-taggers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4b49756f82524cc17df7c04f674e36e56cb9c0f20a095b38dc9297e70440d73 The package react-component-taggers was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190990 Malicious code in react-hook-form-persist (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8030e410dc71e9603bb5e1f5ca4c460699bd132a6e5920a1419aedd71ff2c560 The package react-hook-form-persist was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191004 Malicious code in react-native-retriable-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7a3d5e2b867c8c149b9f1a79751ad5cfa9699fe24ec38d49770f9f80a37b3aa The package react-native-retriable-fetch was found to contain malicious code. Source: ghsa-malware...

Malicious code in itobuz-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fcdbc14cc1282398d0aa27b0ada7027ef96a6c2b95c3fcb0fefb926cbb45a0e The package itobuz-angular was found to contain malicious code. Source: ghsa-malware 7bb8d54de22fc55a5690d5bf3b51d9847a98a5dcf0d9836311c615cd6a30b2df...

Malicious code in hyperterm-hipster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1d8acfc5a1442200f373aaee149ff592b46d79a7bed57e8ffbc4dfa8ec01d61 The package hyperterm-hipster was found to contain malicious code. Source: ghsa-malware...