Malicious Package

Overview @amber-team/gatsby-plugin-semcore is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

MAL-2025-191396 Malicious code in gatsby-plugin-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1db5c29950300909f2a9571826a482e10a6ce45dae9529f28ad87ddc2b98119b The package gatsby-plugin-antd was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199366

Malicious code in gatsby-plugin-antd npm...

Malicious code in gatsby-plugin-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1db5c29950300909f2a9571826a482e10a6ce45dae9529f28ad87ddc2b98119b The package gatsby-plugin-antd was found to contain malicious code. Source: ghsa-malware...

Malicious code in gatsby-plugin-cname (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d533b6b1c548148392393696a1a82fc32d46ae923e8a30cbc2e7a9118b1ed21 The package gatsby-plugin-cname was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199205

Malicious code in gatsby-plugin-cname npm...

MAL-2025-191100 Malicious code in gatsby-plugin-cname (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d533b6b1c548148392393696a1a82fc32d46ae923e8a30cbc2e7a9118b1ed21 The package gatsby-plugin-cname was found to contain malicious code. Source: ghsa-malware...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

EUVD-2025-113258

Malicious code in gatsby-vulcan-lacerta-alphard npm...

EUVD-2022-6094

Malicious code in bioql PyPI...

Malicious code in gatsby-plugin-apollo-onetrust (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47674 Malicious code in gatsby-plugin-apollo-onetrust (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in gatsby-plugin-easy-i18n (npm)

The package gatsby-plugin-easy-i18n was found to contain malicious code...

MAL-2025-21208 Malicious code in gatsby-plugin-easy-i18n (npm)

The package gatsby-plugin-easy-i18n was found to contain malicious code...

Malicious code in @amber-team/gatsby-plugin-semcore (npm)

The package @amber-team/gatsby-plugin-semcore was found to contain malicious code...

MAL-2025-7059 Malicious code in @amber-team/gatsby-plugin-semrush2 (npm)

The package @amber-team/gatsby-plugin-semrush2 was found to contain malicious code...

MAL-2025-7058 Malicious code in @amber-team/gatsby-plugin-semcore (npm)

The package @amber-team/gatsby-plugin-semcore was found to contain malicious code...

CVE-2023-30548

gatsby-plugin-sharp is a plugin for the gatsby framework which exposes functions built on the Sharp image processing library. The gatsby-plugin-sharp plugin prior to versions 5.8.1 and 4.25.1 contains a path traversal vulnerability exposed when running the Gatsby develop server gatsby develop. It...

Malicious code in gatsby-plugin-source-map (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf49f8eebef7efd6ec079a3a0196b2b1eaeaf516da7db094412f8d5080f61f0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in gatsby-plugin-source-map

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...