MAL-2026-16455 Malicious code in some-tool-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e053568381d2b1cf3b7e62e3152651c843cfc3e32f056574d7a64dae4531b2e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16446 Malicious code in better-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d2f690a34e0e9b3a8df4caf676f30b542d8dc710033dc70ddf6e3c18ee3a1fa The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in solo-async-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 419538617e0e07800ec7fb28e19be25e6b99687548af5ba4ae82ae486daca882 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in webp-https-errors (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 447aba02eddd7913b1520b8d21892e996cecbdf100ba2a772cbff3cb14fa74f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-16449 Malicious code in iso-datetime-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9db51cfb135f41debd79f82f4bd905994ecdb54d08811d3755ac66aed13cb05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-16459 Malicious code in webp-https-errors (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 447aba02eddd7913b1520b8d21892e996cecbdf100ba2a772cbff3cb14fa74f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-16448 Malicious code in debounce-throttle-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2799630960bce0578627557c1a8c41369d2a1556f9632d6491903f17f21d7a39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-16454 Malicious code in solo-async-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 419538617e0e07800ec7fb28e19be25e6b99687548af5ba4ae82ae486daca882 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-16442 Malicious code in moudeva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dec843001e36153e09f56c056031d90bf3bcf909a5fe0469f8b27cbed7361c3a The package's main.js references childprocess at multiple locations lines 19, 883, 961 alongside HTTP POST calls lines 365, 369 to a hardcoded endpoi...

Malicious code in moidevl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b05c7a5581562edc719cbaaf2f6b317d322a6a2ef96c9fc905b53394e42101 Despite a README describing a 'Windows diagnostic utility,' the package implements an anti-proctoring overlay for cheating on remote exams Safe Exam...

MAL-2026-16441 Malicious code in moidevl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b05c7a5581562edc719cbaaf2f6b317d322a6a2ef96c9fc905b53394e42101 Despite a README describing a 'Windows diagnostic utility,' the package implements an anti-proctoring overlay for cheating on remote exams Safe Exam...

Malicious code in luftzxyuiwgbgsp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28fe33e3ef1fb00e811cf24d940bb469190f27f2759963838cedbdf4e5d4da09 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in xsjukcnv8low26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c18a0eb3bfed72107b77ceb231f89637cb4efe0babbceae9e2bc84873fed6a3f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in tibcwmpoeafh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8972beee1619a236a6811896c8f7c2bded94a428c0de8f6861e7ef956b63fb9a The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16451 Malicious code in luftzxyuiwgbgsp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28fe33e3ef1fb00e811cf24d940bb469190f27f2759963838cedbdf4e5d4da09 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16452 Malicious code in mob4zchvuine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f22c6a37f547c13e9444268b7cf9484c580ec5e15d5e6a1207bdcdfc7be2ff35 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16460 Malicious code in xsjukcnv8low26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c18a0eb3bfed72107b77ceb231f89637cb4efe0babbceae9e2bc84873fed6a3f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16457 Malicious code in tibcwmpoeafh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8972beee1619a236a6811896c8f7c2bded94a428c0de8f6861e7ef956b63fb9a The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16447 Malicious code in caphsmgiwy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2be9097447a7359110650f7119fc6b9265bba96bea6a4814d5534e6cf4a4bd59 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16450 Malicious code in kamafhbnowct (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 646021a6b47fafd23415f7357b91660f4ce18545fa5f9b2ba370842c632fb92d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...