MSC-2026-12485

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: This package contained malicious code and was...

MSC-2026-12551

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: This package contained malicious code and was...

Malicious code in player-support-tools-ui (npm)

Source: amazon-inspector 43e35bb951aab567fdb15daabc8db34691f937b3fefbf102bc1e19657c88aa72 The package player-support-tools-ui was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in ssp-config-management-tool (npm)

Source: amazon-inspector db3d336f799326b6b1dfcbb9485d62b5d02423f9c6a7e7dbb4c29940c22e0ef5 The package ssp-config-management-tool was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in mms-ref-client (npm)

Source: amazon-inspector 2b3d204e0f49cb41d203a04419909bce2a366f33ab7859b4e1977374ec1db93e The package mms-ref-client was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in store-service-worker (npm)

Source: amazon-inspector 96644928dc5cfc92d966ad6cbd2a16820b0ad6951971e35c226f31e2e594f687 The package store-service-worker was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in mod-manager (npm)

Source: amazon-inspector 8ec890b586ea0ff47a8ba914ff95c535bdeebbdfaf6788b6357a5afae32c9463 The package mod-manager was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in set-egs-backend (npm)

Source: amazon-inspector bbceb6929d59ced3a4df01c1d61f7da54d4d0a85e467329fecd5f44e59d43f32 The package set-egs-backend was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in qa-egs-rollback (npm)

Source: amazon-inspector f069cbe096962a4415247fec584da742da87006805e2e0a12d2e0a080936479d The package qa-egs-rollback was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in mms-ref-dedserver (npm)

Source: amazon-inspector 93da1778cc346bce6d2f674c1b600f0b6d8ea31cd2ee84b0f5d2f22df220ce3a The package mms-ref-dedserver was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in generator-epic-react (npm)

Source: amazon-inspector b7ce6d820d3b2380b3b4cba48d41e31b26d0fc74dd18635e0e01ad7a94c8ba0f The package generator-epic-react was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in mms-simulation (npm)

Source: amazon-inspector b05f92c3ffc5ed97302ac873fd40030318d8d2d89d267c615a2b1309d5fd047b The package mms-simulation was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in mms-service (npm)

Source: amazon-inspector 5912faf3f600f103f64fe2d342cbd05b7146c3b78d9ee54473b28195a5185e49 The package mms-service was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in mms-thin-client (npm)

Source: amazon-inspector 57427ccebae288ec20571b2713f7e71b7cf97044e30896db254f9371e32764f3 The package mms-thin-client was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in mms-tools (npm)

Source: amazon-inspector b68fdee506c83917c4153bbb96b046ba77fac1a06fd42a4450e0da45eaaf0620 The package mms-tools was found to contain malicious code. --- Credit: OpenSSF source...

CLEANSTART-2025-NL28578 Malicious code was discovered in the upstream tarballs of xz, starting with version 5

Security vulnerability affects the xz package. Malicious code was discovered in the upstream tarballs of xz, starting with version 5...

Malicious Package

Overview beautifytext is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview friendly-greeting-tools is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Malicious Package

Overview qa-egs-rollback is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview mod-manager is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...