517 matches found
MAL-2025-190668 Malicious code in @orbitgtbelgium/mapbox-gl-draw-scale-rotate-mode (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e4c029f895b6e2e59e54d01b72927b97daa87a560816829220a1b62775221ae The package @orbitgtbelgium/mapbox-gl-draw-scale-rotate-mode was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190667 Malicious code in @ensdomains/eth-ens-namehash (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0009bf3870d33e9e174ce53fe0a281b43402e1f8b78f62e6cd296ad8f082588 The package @ensdomains/eth-ens-namehash was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190699 Malicious code in react-element-prompt-inspector (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58c142c9370bed76cfd7eb230462162a911d50057bbbc351f019dae4a8208784 The package react-element-prompt-inspector was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190684 Malicious code in @trigo/eslint-config-trigo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f323ad76d021234c96924ded9095572d18be962e0c71fb9cfbeb1fa43079e961 The package @trigo/eslint-config-trigo was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190690 Malicious code in @trigo/trigo-hapijs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c7e81e80711c8a06b45fdcf920330f28c7da02f8080f179ee1161717bdc2a78 The package @trigo/trigo-hapijs was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190686 Malicious code in @trigo/jsdt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff5aae2e5762514a4d2a304a2ceb36d9b895c8bd88c9a6303752aea4b078119f The package @trigo/jsdt was found to contain malicious code. Source: ghsa-malware 91f1b0ba55c42b887eade435580838bef529a7fe7a9b9fd8b3cd05ada0528cc7 An...
MAL-2025-190680 Malicious code in @trigo/atrix-orientdb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dff5fee3398c42159c86cf250a0b25cae13f5e94b812aa6ef984b8fa8b4bd543 The package @trigo/atrix-orientdb was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190679 Malicious code in @trigo/atrix-mongoose (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8faf4ce8a59f1dddea70c86855597a55d78518cc7f1c98ae103c8be6559acf5c The package @trigo/atrix-mongoose was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190692 Malicious code in atrix-mongoose (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc27b71b0a6bedd292b899cd2cafaae36c887c103fbebc76f31189538787ffc The package atrix-mongoose was found to contain malicious code. Source: ghsa-malware a7b1ca5c62f87d30469e55f9e277026bdbedad7e3060cea2e2a80f20a87dc438...
MAL-2025-190673 Malicious code in @posthog/rrweb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e7ff62f7afccd552b5eff3833fa122ace1a2f8ef6447e4b372673896063098f The package @posthog/rrweb was found to contain malicious code. Source: ghsa-malware 8278c73c0fa29817d8923864303d2e24c5a7bd038a9f8a2cae587329a3837cab...
MAL-2025-190666 Malicious code in @ensdomains/content-hash (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39aeb9f2a2d9a8ee1c57695456c8af6657d069eaee694ef7f8c128bb292bfabd The package @ensdomains/content-hash was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190661 Malicious code in @asyncapi/multi-parser (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fca41600409d9446c4771677d000e0c23cb7f5a5d876cff66c762472d477bae The package @asyncapi/multi-parser was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190638 Malicious code in @asyncapi/modelina (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6021816ea47fd6743ed24c196df8db60f0649e0d5b185ceb9b418ba457b21e3 The package @asyncapi/modelina was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190636 Malicious code in @asyncapi/generator (npm)
@asyncapi/generator version 3.3.1 was published as part of the "Miasma RAT" software supply-chain attack campaign identifier "miasma-train-p1" that compromised several widely used @asyncapi npm packages on 2026-07-14. The malicious code was injected using whitespace hiding: it is appended to a...
MAL-2025-190642 Malicious code in @asyncapi/react-component (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9ebe88915a6eee986912a6566783764ff832588763eaa7b763710ed9f992299 The package @asyncapi/react-component was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190635 Malicious code in @asyncapi/avro-schema-parser (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 563d7e586605241445ca55919018f95a81d98cbf9599eefa9c812eef9ccd7747 The package @asyncapi/avro-schema-parser was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190647 Malicious code in @postman/tunnel-agent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6961dafcc910bb7a6b1db8cb597068eeb85f973dcd669392354a7b614928dbf5 The package @postman/tunnel-agent was found to contain malicious code. Source: ghsa-malware...
Malicious code in @quick-start-soft/quick-markdown-print (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49e82ae5f39d0c568ce2ebb23ff053c97eba1c0bb306b946c3fefc4c0680b526 The package @quick-start-soft/quick-markdown-print was found to contain malicious code. Source: ghsa-malware...
MAL-2025-48550 Malicious code in doppler-secrets-fetch-github-action (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15ae1d785262a986eb630a24e7abcd16bd4c799262e11059e5911a40f184ee5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
