MAL-2026-786 Malicious code in @rsgweb/locale-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b1882e2ffa769f9383127f2bfc582935b3bb1145e172eb6941a0276989a983f The package @rsgweb/locale-tools was found to contain malicious code. Source: ghsa-malware...

MAL-2026-734 Malicious code in xpack-subscription-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2447449c96d24d0c693d9105d432d9818fa96fb0c408fb371a3dc15167960feb The package xpack-subscription-test was found to contain malicious code. Source: ghsa-malware...

Malicious code in incode-kyc-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57c3747164b70855673dc56ebec2fbfcd084909fe71fe4ded3b1e80d4c155f53 The package incode-kyc-backend was found to contain malicious code. Source: ghsa-malware...

MAL-2026-617 Malicious code in roots-cms-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9670a58bdf8573b9c7d94a74cf58593a55692bfcf33d931693680389b981f89c The package roots-cms-client was found to contain malicious code. Source: ghsa-malware 88007d193d64ac8d7a2a970903353601b1f620a48f22c3cd3c7a838da0cce4...

Malicious code in c11dff444 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d47b3f981fe050f2eab507069b880d1c47c4107c28eba0d1a16010400a249ad The package c11dff444 was found to contain malicious code. Source: ghsa-malware 437d8651f7d884d1905e0d01e2accffb3fcce5408fc4a6b0ef2ca6c37f0bade4 Any...

MAL-2026-607 Malicious code in banquet-runtime-modules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 236dee5bac395a6446685322fb3dadb454e4b7f7d43a132111a8392721fed206 The package banquet-runtime-modules was found to contain malicious code. Source: ghsa-malware...

Malicious code in pay-by-bank-dashboard-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20c58f9aa900a5052fd440dd0a9a3e3ecb345fb4fee2be527b5af385485ee224 The package pay-by-bank-dashboard-server was found to contain malicious code. Source: ghsa-malware...

Malicious code in un112 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1521874d670863316d54ec7213c067617cac71476025f1e398ca9ea01fe1f71 The package un112 was found to contain malicious code. Source: ossf-package-analysis cdd54832c7f264a3a18301f19d464ca271573a29173fe997e49e6c55b0ae1f87...

Malicious Package

Overview @testfeii/hallo-word is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-49 Malicious code in diskho (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03f656f5769803487abac8cada65f7f7a80d04ecbb9c39633408b2c48a157b5 The package diskho was found to contain malicious code. Source: ossf-package-analysis b944051826f01c581baeba101564a1e463b08dc5ba4353b9598eff67ebddc9f...

Malicious code in rules-deployer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 849a58d27ed0090633a72330c705b5849146aa1493961574c6a11dc758e28e34 The package rules-deployer was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192960 Malicious code in kcheck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 660a47461992421159d386fb5e8ce14c3c794e8059b276d4de539ca2235d8780 The package kcheck was found to contain malicious code. Source: ghsa-malware 9666f7f55b90b84ee1e458016ed3eb475f26465bcf2d4fbe690a142c3a53e311 Any...

MAL-2025-192951 Malicious code in ugc-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffd0991cb1cc7098930838b404210022aa2667d78f2884417f449d85e90fb12 The package ugc-kit was found to contain malicious code. Source: ghsa-malware 4e44ecda4e96910709480e50046146e482992e36fb2e8429211e1f653376d123 Any...

Malicious code in ugc-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffd0991cb1cc7098930838b404210022aa2667d78f2884417f449d85e90fb12 The package ugc-kit was found to contain malicious code. Source: ghsa-malware 4e44ecda4e96910709480e50046146e482992e36fb2e8429211e1f653376d123 Any...

MAL-2025-192939 Malicious code in magic-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dea39f25cc72cc9ab080d6f35ef68c9a061a8df5fe184194798109dad36faa5 The package magic-poc was found to contain malicious code. Source: ghsa-malware 89ec0cb0d10ed48f38fd79d080a40f46510b46211da23e64a2c72d9b053cb73b Any...

Malicious code in ing-feat-pis-single-payments (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94bc97753b6e7a9fa1430482f3266bf40e985ab97ef48bbd35a8d7fd8f404ca6 The package ing-feat-pis-single-payments was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in shakti20261 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a217c3c91ff80edbc760c82358d7d22c5819f0110ccf221e4d3639eb22e08ac7 The package shakti20261 was found to contain malicious code. Source: ghsa-malware e75357912e9e470657d646a2fd23a82c2f23cd2a6d0a987fb5b880eb8fa4c731 An...

Malicious code in vue2-amis-custom-widget123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 027b467c811b36f60dc7589ccd8251ffc56de7f40345d6a471a3a550a2a8df7e The package vue2-amis-custom-widget123 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192395 Malicious code in libxmlrussia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09a896cf7e2a9565c72e2dbea89306401102334fe016a8819be5ab476cff9d8e The package libxmlrussia was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in libxmlrussia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09a896cf7e2a9565c72e2dbea89306401102334fe016a8819be5ab476cff9d8e The package libxmlrussia was found to contain malicious code. Source: ossf-package-analysis...