Malicious code in orbit-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34962586ab6b1dda417a71f777d710ef91eadfbdaf81c32d957e9ed8163e4a3e The package orbit-soap was found to contain malicious code. Source: ghsa-malware 3907aa266d3bd43dbf2a9fdfa8673313f17448ecfcd226e4d4a3e5c572d20662 Any...

Malicious code in @strapbuild/react-native-perspective-image-cropper-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e2f74d9d1d21777c83aa98d57c78a19a6161665a8af16c87f380f0d5b8139e The package @strapbuild/react-native-perspective-image-cropper-2 was found to contain malicious code. Source: ghsa-malware...

Malicious code in @quick-start-soft/quick-task-refine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b916ec147b8ea7421a203e04aee7554ffafacffd6a0aa576031a36f8773dc41 The package @quick-start-soft/quick-task-refine was found to contain malicious code. Source: ghsa-malware...

Malicious code in jan-browser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6061d20158eb6f2952932cac8bd818201360f36f2a4fd989357c12400c58a49b The package jan-browser was found to contain malicious code. Source: ghsa-malware a3954e4e8e77c870bfc41cd61410400a2f7ba85ce1d56123f2e672f63543e6e1 An...

Malicious code in go-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de2b1faf83824d6073ab908373d9704ee8fb7cb05322cfb6cedc079603455f10 The package go-template was found to contain malicious code. Source: ghsa-malware 508770194aad24fbaa79597bcc1a3f618b9397f2ad3f6fd1dc06c5dc0938a6ee An...

Malicious code in @ensdomains/hardhat-toolbox-viem-extended (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0f30b72e834f89b59bb7ae3b7ce2b224cfe0619ce1e01190b940be31df3a309 The package @ensdomains/hardhat-toolbox-viem-extended was found to contain malicious code. Source: ghsa-malware...

Malicious code in capacitor-purchase-history (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ef54df7bce3add5d55de2f91510b75ffc757c47626010c4f44b59ef8f08242c The package capacitor-purchase-history was found to contain malicious code. Source: ghsa-malware...

Malicious code in posthog-plugin-hello-world (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 411e53a1772704343ddb3da6957e8e0ee4e8167ec93030bf27e2247081fddc61 The package posthog-plugin-hello-world was found to contain malicious code. Source: ghsa-malware...

Malicious code in @asyncapi/nodejs-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 882d41f9612d27876945ecf55500df19a306cfac18cf244eb72f05288a51222a The package @asyncapi/nodejs-template was found to contain malicious code. Source: ghsa-malware...

Malicious code in token.js-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c0ea628a23a78a7ef88dc4301ffbaf6515d00c92b331d0dfe518b6156d6cf01 The package token.js-fork was found to contain malicious code. Source: ghsa-malware c175fb9f3c6376f85f6e9b597aeaa381892983e4348984c54354174cca12f8a2...

MAL-2025-190708 Malicious code in @actbase/react-daum-postcode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b6730961ddc6bcfd14bc8564e2a8ef3d34d757e1ffae65ed7ff88232e115104 The package @actbase/react-daum-postcode was found to contain malicious code. Source: ghsa-malware...

Malicious code in test-hardhat-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8c58c4506524c992c75582a4ebe5865965b7bf58281bd247ee81b3b08731515 The package test-hardhat-app was found to contain malicious code. Source: ghsa-malware 03564b5c607dce5fdce1c0f5802eb5816a37d6f74acf0e5ae3624f6e9b2224...

Malicious code in @posthog/piscina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebd3d94d864b267499cd7c7897fa7fc4af2c420f3aa6bd152a0b22feae86418b The package @posthog/piscina was found to contain malicious code. Source: ghsa-malware 731794a5898b7ca6049626b91dad59ed65293d59335397c1989a1b45a498cb...

MAL-2025-190777 Malicious code in orbit-nebula-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39053d1e21106bb38ff0f67ad92e018d3e94dd368d8a9df7df45391acd94b852 The package orbit-nebula-editor was found to contain malicious code. Source: ghsa-malware...

Malicious code in create-glee-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5c0932871cd18a6f6a6b4dc800d53bb26dee4aa4d1ca50380eb529d8de49e31 The package create-glee-app was found to contain malicious code. Source: ghsa-malware e24413ea376e0b85679ffebea5b81417a76a0134b6cde174e7a183437326193...

Malicious code in @zapier/browserslist-config-zapier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5146756159d44339572781661307fc36bb08adb636158ee54628f774506ae47 The package @zapier/browserslist-config-zapier was found to contain malicious code. Source: ghsa-malware...

Malicious code in @asyncapi/web-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd2dff5164da9cab0fa9cbd6684d231b19caa4cc57fe660f4d0ad2cd8573dc1a The package @asyncapi/web-component was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190787 Malicious code in vite-plugin-httpfile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d63741ea6b6aadbc224aabf56e98c5eb7b664d7554dbb502869a97ffffb2f46 The package vite-plugin-httpfile was found to contain malicious code. Source: ghsa-malware...

Malicious code in @postman/node-keytar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4c8023740ffdaef4872c662f4f7be6f3258a479dfb93494adda9c170fa4818 The package @postman/node-keytar was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190667 Malicious code in @ensdomains/eth-ens-namehash (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0009bf3870d33e9e174ce53fe0a281b43402e1f8b78f62e6cd296ad8f082588 The package @ensdomains/eth-ens-namehash was found to contain malicious code. Source: ghsa-malware...