MAL-2026-12108 Malicious code in alipclutch-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81b0a0abb82a50d7f1228c5094619ccaca0223ca767731d2a91f926f04682c1f This package is a fork of the Baileys WhatsApp library. lib/Socket/messages-send.js constructs a network destination via...

MAL-2026-4496 Malicious code in bandkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 687dcebaf30461a2325de226851b84abfb6db6359a12c9392ece9c5ff02a620d bandkit ships a React component BandPanel that, when rendered without an explicit strategyWalletAddress prop — the configuration shown in the package...