MAL-2025-190883 Malicious code in @posthog/ingestion-alert-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8eecfada0b8b32fc4e69b17399fba304ef75a1cf7ad1e2fabbf1eabdd10a5c The package @posthog/ingestion-alert-plugin was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190884 Malicious code in @posthog/kinesis-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2f869c9f2e7f4d35c729f506eb479a88bab7ca0dcd2aa6f2485319d87f39dd5 The package @posthog/kinesis-plugin was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190863 Malicious code in @asyncapi/studio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eabd7c33d6759f64f573e5cc75565c4669ed790fe45d77d2756d1380b79063f The package @asyncapi/studio was found to contain malicious code. Source: ghsa-malware be3f6f1fe39d5dd5c1ee3ab702e2bee67bc36c54ded865ad25eb2504919b58...

MAL-2025-190857 Malicious code in react-native-worklet-functions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed2ae3214c7915580ec4f119fc2fc1ee0e071e2deea48ef419973982180aa9c The package react-native-worklet-functions was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190844 Malicious code in gate-evm-tools-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f11f5364b5246431e888b7293099cd8833dbcdd463cc7ce7d1aeabdc066faa5a The package gate-evm-tools-test was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190836 Malicious code in capacitor-plugin-purchase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ff438ebca922d9d6cb6a8a96700003065dbfc0ed65a5984edec2d5f5d37751 The package capacitor-plugin-purchase was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190793 Malicious code in @actbase/react-native-devtools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6903aaa72b2c62de00654968d7729b4fd07bfa78bf68f14c1ee924f6c5dde9c2 The package @actbase/react-native-devtools was found to contain malicious code. Source: ghsa-malware...

Malicious code in github-action-for-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 456b535e2ac0dbf2257fbb995ee5d72a53c3cfc544a0c9fb477f0c7eb20477d1 The package github-action-for-generator was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198831

Malicious code in github-action-for-generator npm...

MAL-2025-190845 Malicious code in github-action-for-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 456b535e2ac0dbf2257fbb995ee5d72a53c3cfc544a0c9fb477f0c7eb20477d1 The package github-action-for-generator was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190825 Malicious code in @strapbuild/react-native-date-time-picker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5a0237f0f0916f69a132f28afefe58f6c681c43c8dd6d3ca62ae2a3c2d6af45 The package @strapbuild/react-native-date-time-picker was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190840 Malicious code in esbuild-plugin-eta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee6c2c46a6a594f389aa85580f033eb39c879f80478d3cca6d746bd8f8afe21 The package esbuild-plugin-eta was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190862 Malicious code in zuper-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74a0f9381a4c5030be93c471e6489c9de683e8c9e2ab2872d8db32583c4fc35e The package zuper-stream was found to contain malicious code. Source: ghsa-malware 123b2f89234617b4d3a0968f699b3cd51545e8d268e5fc793b393f71645c4784 A...

MAL-2025-190822 Malicious code in @quick-start-soft/quick-markdown-compose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4390993c4dc5c3a55b6da923961e34a8fa5caa1f06de7f3ac1ce24dba811c018 The package @quick-start-soft/quick-markdown-compose was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190829 Malicious code in @trigo/hapi-auth-signedlink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bed6824ae90bafaade2c426612b295defed6107b61296445aa2d1d728729c23b The package @trigo/hapi-auth-signedlink was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190834 Malicious code in calc-loan-interest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ea88e110d3bd8cf01c5ec0212632ca3ca8217353b942219b51a9ba53887fb43 The package calc-loan-interest was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190814 Malicious code in @ensdomains/unruggable-gateways (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19161096da8bc9f3514ff35b262f9d1f1683b0f54a01041afb0993d5d5268f9e The package @ensdomains/unruggable-gateways was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190795 Malicious code in @actbase/react-native-kakao-navi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c36d15c71a449d1035dde1e2271d10ec03380984f3d4e8f520200fdd5c6da864 The package @actbase/react-native-kakao-navi was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190806 Malicious code in @ensdomains/mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa69028234e7d9845b0190a845d7ed004315332e53db9625716d3e8c34f9d555 The package @ensdomains/mock was found to contain malicious code. Source: ghsa-malware e5e3d7ebf0c01ec0fcf11c5473aa2d0ae19924590bc4f27ac7e988945272d5...

MAL-2025-190830 Malicious code in @zapier/ai-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a316e279c8bb03071a6e5197270ffbb95c5f23592a64c504271f47e0f9adb11f The package @zapier/ai-actions was found to contain malicious code. Source: ghsa-malware...