MAL-2025-190936 Malicious code in typefence (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c9ac344bf18963e146d64aec1de72c3db819eb2c4356be7257ef1980555a17f The package typefence was found to contain malicious code. Source: ghsa-malware 28d8025e6d485b7679079ba265b2ed9a28c10029903c94441308121d974cbf18 Any...

MAL-2025-190940 Malicious code in url-encode-decode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37ce07aaa237eff3cc95c7bb560f4096191d2d5328de45f176f3f8662ca7cd34 The package url-encode-decode was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190906 Malicious code in @postman/pm-bin-windows-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02ae17f856e11e19fc956689bbc3e88c8de0052e0ea1017d2048d92f20bfa91b The package @postman/pm-bin-windows-x64 was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190866 Malicious code in @ensdomains/buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bae46f5c19a843ced3c421c4ef2bb7fc8c6dc112240fc84abafd26405d0a85bf The package @ensdomains/buffer was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190902 Malicious code in @postman/mcp-ui-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63316f530f87ac69078cc5b93dfdbc1a58d62f1f37a663f8bf40cb5489f4defc The package @postman/mcp-ui-client was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190894 Malicious code in @posthog/taxonomy-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6160bb29593f706f1623c9cc373f06290747d183e2d495f4d0afc169252d3046 The package @posthog/taxonomy-plugin was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190880 Malicious code in @posthog/github-release-tracking-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb87af9bbf0349dfcf64e3a477f69780fd16d5d4d8e0269f263dc25214fd2f00 The package @posthog/github-release-tracking-plugin was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190881 Malicious code in @posthog/gitub-star-sync-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4be422ec924addbeb23c34a8b3305835feb3d665ab57afdc1450734d0b10f5a4 The package @posthog/gitub-star-sync-plugin was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190920 Malicious code in @zapier/stubtree (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8dfbd67e2e2058bdfb35bcccc34ffd8ed380f6f22fc196d18803fbca6725a04 The package @zapier/stubtree was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190903 Malicious code in @postman/pm-bin-linux-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94045a09bfa0905195be4f028d9e42bcf608154a645b14b2028754dc6e787b80 The package @postman/pm-bin-linux-x64 was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190884 Malicious code in @posthog/kinesis-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2f869c9f2e7f4d35c729f506eb479a88bab7ca0dcd2aa6f2485319d87f39dd5 The package @posthog/kinesis-plugin was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190869 Malicious code in @mcp-use/mcp-use (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de0023b5bffd20d429759e1ae5215a619566250b2e0d2ebe4acd2e27e484d493 The package @mcp-use/mcp-use was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190889 Malicious code in @posthog/plugin-unduplicates (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c908d2f59bb746353f63ff6561e3e99d8055d86ee72332228bfd40f24b8dad0 The package @posthog/plugin-unduplicates was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190883 Malicious code in @posthog/ingestion-alert-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8eecfada0b8b32fc4e69b17399fba304ef75a1cf7ad1e2fabbf1eabdd10a5c The package @posthog/ingestion-alert-plugin was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190825 Malicious code in @strapbuild/react-native-date-time-picker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5a0237f0f0916f69a132f28afefe58f6c681c43c8dd6d3ca62ae2a3c2d6af45 The package @strapbuild/react-native-date-time-picker was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190840 Malicious code in esbuild-plugin-eta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee6c2c46a6a594f389aa85580f033eb39c879f80478d3cca6d746bd8f8afe21 The package esbuild-plugin-eta was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190814 Malicious code in @ensdomains/unruggable-gateways (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19161096da8bc9f3514ff35b262f9d1f1683b0f54a01041afb0993d5d5268f9e The package @ensdomains/unruggable-gateways was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190795 Malicious code in @actbase/react-native-kakao-navi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c36d15c71a449d1035dde1e2271d10ec03380984f3d4e8f520200fdd5c6da864 The package @actbase/react-native-kakao-navi was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190775 Malicious code in manual-billing-system-miniapp-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fbe247429665dfb3140f405fe662a2c53590e8be9cfeca89a868c826a4fe04f The package manual-billing-system-miniapp-api was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190714 Malicious code in @asyncapi/go-watermill-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88957e3f78294013ec0e22167aec58b8de4dcc65099728725b884c54b6afa328 The package @asyncapi/go-watermill-template was found to contain malicious code. Source: ghsa-malware...