MAL-2025-191124 Malicious code in lint-staged-imagemin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8cfbe33b97d4e3997d348c9532c834715e755ea1d28a6b30f2276209d4f45db The package lint-staged-imagemin was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191156 Malicious code in zuper-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4cc2065f0dd8abd271cf1dd9577497f7fb19724820c50925509236093e73567 The package zuper-sdk was found to contain malicious code. Source: ghsa-malware c84dbb98c137f6b50ce20f0cae6113a3d32f5cd6910583273c4d11d4966d105c Any...

MAL-2025-191129 Malicious code in ngx-useful-swiper-prosenjit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 285834c76af1324a80d9544c32d23970dce50b43ab7fb2d3ada984f7537ff5d2 The package ngx-useful-swiper-prosenjit was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191126 Malicious code in luno-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2620f6e7e546cf45578383002edf88f0d14cfff7c3b3fbdadff49d591e9a67d The package luno-api was found to contain malicious code. Source: ghsa-malware b14565c7974772eb7c5d608e000f39017115adb0304131b6d1b03f7402fa9d1f Any...

MAL-2025-191140 Malicious code in piclite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d776815ebc9f644d4e180897c8faecdb8179b86900d868934148989047d6ef55 The package piclite was found to contain malicious code. Source: ghsa-malware 298d5c66cb85081f480bec9e5c38bc7c2d419d609714be7346d3bafb0b2525eb Any...

MAL-2025-190987 Malicious code in prime-one-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 686403bdb86cae7a644dd5bb861eacb91b0437d25b0cf1c367e04ab8a411cebe The package prime-one-table was found to contain malicious code. Source: ghsa-malware 637ced514205a8512ba9f365d6f93fbcbd2d45e2144a5cc076c4d14187da317...

MAL-2025-190981 Malicious code in next-styled-nprogress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73288a3937c0b6e5fe20c011142795ae2f436252a77e2ab6b24dabcdb9ab7dd5 The package next-styled-nprogress was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190989 Malicious code in react-component-taggers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4b49756f82524cc17df7c04f674e36e56cb9c0f20a095b38dc9297e70440d73 The package react-component-taggers was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190991 Malicious code in react-jam-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 369fe7c56e5f271a31e023cbe36323fc11043fc4747d0309c5c48aaa1eedf822 The package react-jam-icons was found to contain malicious code. Source: ghsa-malware 1c50426946a6dd92cf360d347aa3ed8f15988f3655c7721aff8dd0b8ff8e946...

MAL-2025-190947 Malicious code in @posthog/plugin-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbacde545c940abfe63a0667580ea37cfc021d6b3e25094b71e23273cd899e1b The package @posthog/plugin-server was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190992 Malicious code in react-keycloak-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cf006e02e42a934dd475393f106cc2cb39abb0f8438ee1a09d63d50649221c7 The package react-keycloak-context was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190979 Malicious code in next-circular-dependency (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bea89df6bfd2c4f68a23ce84ab344f8d0581b90cfbf4c6e0a82570797b5cffc0 The package next-circular-dependency was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190994 Malicious code in react-micromodal.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72c47d6320b68db78fcdfb03b66cfb7cf38551d4e38c7b6442b41a1863406d2f The package react-micromodal.js was found to contain malicious code. Source: ghsa-malware...

Malware in @posthog/github-release-tracking-plugin

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-190995 Malicious code in react-native-datepicker-modal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86014f2b55c2d58c217fd51ebbffc71cbc86fad9b13d443647f1cb11c19c7ade The package react-native-datepicker-modal was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190977 Malicious code in n8n-nodes-vercel-ai-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e3e7549add420dd6e29fcc100779e22f42e36e3d6a194d64ac5cefe5a764971 The package n8n-nodes-vercel-ai-sdk was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190996 Malicious code in react-native-email (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685a2ceb0fc4b3de8462a07c55626285d47bbb72612a7feac2582a7dbfc2a606 The package react-native-email was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190998 Malicious code in react-native-get-pixel-dimensions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3570e34574e0faad44ff9473f62241285d926a86915d14b3593b9c3105520fc The package react-native-get-pixel-dimensions was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190975 Malicious code in mod10-check-digit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bcd18e7922236fa99abb0b31592b55b6d752ddba74e60b766229d9cd401dbca The package mod10-check-digit was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191001 Malicious code in react-native-modest-checkbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c98ef36559d9b7c9aeeb0abd25c7f2078178584a29234764e9a1ad89f6bb826a The package react-native-modest-checkbox was found to contain malicious code. Source: ghsa-malware...