Malicious code in gas-diff-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f6244035d2e65cd84c001ff936ebc019b7139c8e2afadfadfd2026c60208e4b On require, index.js runs an IIFE that persists an install timestamp and UUID under /.forge/gas-diff.json. After 72 hours have elapsed since first...

MAL-2026-5909 Malicious code in react-hook-use-debounce-throttle-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0a4d8a0470a3e7fcb2da7cdb29ba6412125924a486aa6f4a437ccfbeb5ca4af package.json declares a postinstall hook that runs node -e to issue an HTTPS request to the bare IP 8.140.205.78 on port 80 with all errors silently...