MAL-2026-776 Malicious code in ac-checksum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421654f0d216d3cb6af35eb9973ccd59d6d8c7c3d8c618bf1f49343a7756aa47 The package ac-checksum was found to contain malicious code...

MAL-2026-636 Malicious code in idv-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1bde07a7c30476e3cb1a1025e47aed005d4c7dd1795c0643ac2095a64e88b54 The package idv-script was found to contain malicious code. Source: ghsa-malware ee9e8b3868a2f4ff7829c20134e3617ac9a2d68093b156c31685710169c3f430 Any...

MAL-2026-630 Malicious code in cowsay-allcaps (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0de832c3418f9a9b6e1645552b57338a05e07f2a479fd99f0aca66e931ebadac The package cowsay-allcaps was found to contain malicious code...

Malicious code in cowsay-fancy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0f9486b25540d8b6cc57f25e49747500f20e247fa207953354e74d2cc62fbfd The package cowsay-fancy was found to contain malicious code...

MAL-2026-637 Malicious code in launchdarkly-cpp-networking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6c4fb76fdf3a3ab10ddc884a1fcc11f57ef3b0e44df500c5f2881f40cec0b20 The package launchdarkly-cpp-networking was found to contain malicious code. Source: ghsa-malware...

MAL-2026-638 Malicious code in solhint-plugin-hyperlane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc1aa9de63bf20821ba2b8081862d56bf4238d4d5138cdfae10fa1d260ee9b57 The package solhint-plugin-hyperlane was found to contain malicious code. Source: ghsa-malware...

MAL-2026-628 Malicious code in @casaverso/frontend-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48584fd15701448c3394285943de2520455a7b1fc07cead90b74d535437feda4 The package @casaverso/frontend-core was found to contain malicious code. Source: ghsa-malware...

Malicious code in @casaverso/frontend-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48584fd15701448c3394285943de2520455a7b1fc07cead90b74d535437feda4 The package @casaverso/frontend-core was found to contain malicious code. Source: ghsa-malware...

MAL-2026-635 Malicious code in finnairshop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79d4d53f987d9f13e00e895d04155d3d28ea228eacb34a2f273667e520c5525f The package finnairshop was found to contain malicious code...

Inspector Gadget operating system command injection vulnerability

Inspector Gadget is a set of tools and frameworks based on eBPF developed by Inspector Gadget Inc. Versions of Inspector Gadget prior to 0.48.1 contained a vulnerability related to operating system command injection. This vulnerability stemmed from improper embedding of user-controlled data durin...

MAL-2026-496 Malicious code in hemi-btc-staking-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b19073a10f9ea03f132e59a88b1c0a694120c696aa0be4824281160c7bfffb56 The package hemi-btc-staking-actions was found to contain malicious code. Source: ghsa-malware...

Malicious code in eits (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eec23b0de809cd836bbc3b47232454674773608dd4429cb3ecd6a45fb5d9c2ee The package eits was found to contain malicious code. Source: ghsa-malware c01b198ab80fdc36e1397f6938db086271de12c3a19de4744858614f97742a6a Any...

Malicious code in integromat-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7de4e86762c4fcb7682615925818028501cfb55cdd9fdeaf238f2e186b1f121e The package integromat-ui was found to contain malicious code...

Malicious code in @transaction-list/transaction-list-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b5e5850b5f3f231ca816e6f9c5ae2f7dac1b33092f12407be92abe5f1e26d4a The package @transaction-list/transaction-list-md was found to contain malicious code...

Malicious code in @transaction-list/transaction-list-lg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e58eb6c67a7a0d136bcfc1976caeb8271d491e519e75b15c87994e130147df99 The package @transaction-list/transaction-list-lg was found to contain malicious code...

Malicious code in domino-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d29d322166d012b639664f1711c5c9ca4353508a8ffa2e48eb5b7b14bbda296 The package domino-elements was found to contain malicious code...

Malicious code in oasis-os-provider-messaging (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cca1eb9a5a42a34b2db68e6d23c9c2cd2cbe7098f742e647c9c6867b342e95ab The package oasis-os-provider-messaging was found to contain malicious code...

Malicious code in translation-note (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e07633850d68301541c30e7f731a444071e400f71083928dca6418a9a59c769a The package translation-note was found to contain malicious code. Source: ghsa-malware 95cfe5df95e94bc56327c2241fd1d850ee8bae580cdecfae84ee6f81f09150...

Malicious code in public-site-cms-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ab3fee105c88cb2417b79efd376d25e9f23afaaef354d5f154635820c702079 The package public-site-cms-ui was found to contain malicious code...

Malicious code in public-site-boostmoney-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7643372e3a22915c9385625b458ae16e2bb250b4b55e281371dc61644125e00 The package public-site-boostmoney-ui was found to contain malicious code...