Malicious code in @zapier/spectral-api-ruleset (npm)

Source: amazon-inspector d3f10a9695952f169fff0da94ca1ea47045d97dd486857aad5dbc7b608e2316b The package @zapier/spectral-api-ruleset was found to contain malicious code. Source: google-open-source-security c9470009eec3c58fcacc5893c6c90f0214677afa65cc44cb8ee8243766fdd0c8 This package was compromised...

Malicious code in org.mvnpm:posthog-node (Maven)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security ea90a5928d7667bed4fa9f6effbbe6c8d3ad6521ca51ca2b01551bc02373a7d2 This package was compromised by the Sha1-Hulud: The Second Coming NPM worm. The malicious payload steals tokens and credentials and...

Malicious code in @lokeswari-satyanarayanan/rn-zustand-expo-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73fe3bd99e2f11ab8bb09a9086c4dca8af56372031492ed11d90f1e32a0e8f53 The package @lokeswari-satyanarayanan/rn-zustand-expo-template was found to contain malicious code. Source: google-open-source-security...

MAL-2025-191332 Malicious code in @voiceflow/anthropic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5894ea8ba7ea0e9636e873dae07eb97fdcf83510f4e7a28b23f1d0b2e0a0afe0 The package @voiceflow/anthropic was found to contain malicious code. Source: google-open-source-security...

Malicious code in @voiceflow/pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d83773dcab47d7affa39ddff351187eb072a563a8e3a84ef0d0b525c0f5e0185 The package @voiceflow/pino-pretty was found to contain malicious code. Source: google-open-source-security...

Malicious code in @antstackio/json-to-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8602af1c076497f0aec4cec65fb012f2646c78c8c97f0fa8b234d5ef638fa6d The package @antstackio/json-to-graphql was found to contain malicious code. Source: google-open-source-security...

Malicious code in @oku-ui/roving-focus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef9c5700b2618856ae03ff24523ae655b9b1014a11d02768b8904387d07da4fc The package @oku-ui/roving-focus was found to contain malicious code. Source: google-open-source-security...

Malicious code in @pergel/module-box (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0481d4c0ca9178f58c5a7a14ae396a916f1ff2f36d5066f2565bf521d75cdb5 The package @pergel/module-box was found to contain malicious code. Source: google-open-source-security...

Malicious code in @pergel/module-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ce0c82f79656be99edeef5afbd890a8a5720c0a0e6acbdd2ce273ed8c151c2c The package @pergel/module-graphql was found to contain malicious code. Source: google-open-source-security...

Malicious code in @posthog/filter-out-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29182ef33e7d24b6f775624daaa2eb546ce24fe4d768adf7c561c4e7084d5ff The package @posthog/filter-out-plugin was found to contain malicious code. Source: google-open-source-security...

Malicious code in @posthog/postgres-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10be24eebbc464a61788d5c151ce03171d4abe4b1cd7f27972fef642fc46deda The package @posthog/postgres-plugin was found to contain malicious code. Source: google-open-source-security...

Malicious code in @productdevbook/chatwoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bda41100770824c109d5241de77b76c8a44d3ce71c841114d5f1d02131041ae0 The package @productdevbook/chatwoot was found to contain malicious code. Source: ghsa-malware...

Malicious code in @voiceflow/pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 980243b18346b941c1cb5c2390751258de1c019b02526dbbd7ad2b2e41069656 The package @voiceflow/pino was found to contain malicious code. Source: google-open-source-security...

Malicious code in @voiceflow/sdk-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94c336d86664e23cb704d71c0c615684279844043450c16ee4bd2e434af95435 The package @voiceflow/sdk-runtime was found to contain malicious code. Source: ghsa-malware...

Malicious code in @voiceflow/slate-serializer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb7716bab0bde17a29c041cd61a934d39d4717019743671e8d6164fd166c0bdc The package @voiceflow/slate-serializer was found to contain malicious code. Source: ghsa-malware...

Malicious code in create-silgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d1bd1ddfab5f3ea6caf4f09a93f2ef08f7298e2d68892949e0a6f2975cd1b78 The package create-silgi was found to contain malicious code. Source: google-open-source-security...

Malicious code in dialogflow-es (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc28670a312b03ed84a92c48dcc51356053c6dc516a8360a44e47eed31815486 The package dialogflow-es was found to contain malicious code. Source: google-open-source-security...

Malicious code in hyper-fullfacing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9c05ea2ff38a274ac4ddcadb9206e1f6d6736e32ce536e149160e99fdd37ba7 The package hyper-fullfacing was found to contain malicious code. Source: ghsa-malware 0068679876dedee5d5fc8affa29f353019af199cd3a22493bc1e122f440b32...

MAL-2025-191401 Malicious code in pkg-readme (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc479ddf04c9b4dccdd1b190ab6a553b8b70b35dd010db9a2f6facee0990c78 The package pkg-readme was found to contain malicious code. Source: ghsa-malware 1367f46db577db5123a8d208e0f5d172747a39e623e7c33db0a7e240d28f9d2a Any...

MAL-2025-191241 Malicious code in @livecms/live-edit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c7809db8bb669af7eb4bdecf71a153df39183ffffcccedc22eb5a123491bfd9 The package @livecms/live-edit was found to contain malicious code. Source: google-open-source-security...