MAL-2026-140 Malicious code in rt-live-hero (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b963cc4f9c61717fb440dbd17f3897337fd7aa94a3d077bcd8307c2faf109c57 The package rt-live-hero was found to contain malicious code. Source: ghsa-malware f56b0f0c83fe7af0849099067abaa56333d2eadffeb3f8152244c74b40a706d6 A...

MAL-2026-131 Malicious code in awsm-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86a8778a330765a0a4f5b15960d7bba1cf4ea76946cd4395eb239af31c497330 The package awsm-core was found to contain malicious code. Source: ghsa-malware ba13f4a6fbc556808377c1e17e991b77feb5d2d08af58861be6460732cfc3d9e Any...

MAL-2026-116 Malicious code in jh5o (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bec5d7cca5e58324cc7dea4623e12ad7bfad0a9ac6812a49373017a13c195a5b The package jh5o was found to contain malicious code. Source: ghsa-malware 01eaba01805549a7aa5e246fd04674dd562885c5fa3e0d4a6d30e1595e3fe945 Any...

Malicious code in klywarn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee572661c3786dd95fb006ea7b4d99026b670f00f8e1999c1d961af6d612a2c The package klywarn was found to contain malicious code. Source: ghsa-malware f8ef3f65d8a5142e8b3a669ecd7f5b3891db0031a16d478f7b220fbb41f8d398 Any...

MAL-2026-46 Malicious code in github-badge-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f427bc7bcd3bfb173311bffdab461e2c6fc5350dc9ab3f7dc5e9a4ef6d16728 The package github-badge-bot was found to contain malicious code. Source: ghsa-malware f87cd6af8d38dd37db1b6aca4f637451fe3303fa73ed0705216e3711bc4d01...

Malicious code in spamsms (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03cf698aa8fd11ac3d871633f3a2115632a110296a8965f5857a8fd8835a67a6 The package spamsms was found to contain malicious code. Source: ghsa-malware 0ee3e4d2eb02c7d8a5cb8bc15304efb396753ec2e1cecfc5c4b1b01b469930af Any...

Malicious code in xnetgpt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cec426261ce30ea326ac55c56aaaf04c8efc5dad86f9eecaf8a8397df70dec7 The package xnetgpt was found to contain malicious code. Source: ghsa-malware 168c69e604f23926993c52e06b6a5f4b5355d3dd935261e5aba8c5d761bb17e1 Any...

MAL-2025-192673 Malicious code in xmlwtf3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdc397291400d5d396c50c42966b6c482fb92a577a17ad2440c2ab4c7f0619e6 The package xmlwtf3 was found to contain malicious code. Source: ghsa-malware f1aef41363b46dac1d30ba3bd916904df95fce8278f6b3abed14f7b48002d2c8 Any...

MAL-2025-192667 Malicious code in ctfvampir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7326c736b63690c5699af7e755bf0f5fa0663dcfc80c27ae252c7f8b9d57c47 The package ctfvampir was found to contain malicious code. Source: ghsa-malware 20527b160a7dde628dd4ce3ca417fd8a0977612133c8b1a443cdbe9496efb604 Any...

Malicious code in elf-stats-wintry-chimney-348 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81ca968ff9d74512694f4175979de59da80fad3394cebfb3f6c09f6900309a2a The package elf-stats-wintry-chimney-348 was found to contain malicious code. Source: ghsa-malware...

Malicious code in elf-stats-cocoa-workshop-459 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 362f3da17da5b5a6cbb8124715f6d31867664acc26b4bbbe8537ba02c9dc9677 The package elf-stats-cocoa-workshop-459 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192645 Malicious code in vdous (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 287389231a3c89843cda42ba76c0357e0f1e933cd479a9e12621a250e7014980 The package vdous was found to contain malicious code. Source: ghsa-malware db289bbb4a097deab7e11457a14affb9e2579bda9632d94fba4110f60b48ae63 Any...

Malicious code in @pluxee-design-system/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b95edac344588e8262b1cfdc979c7eb4585329df2ce47b7adc45f23930971e7b The package @pluxee-design-system/core was found to contain malicious code. Source: ghsa-malware...

Malicious code in flagstealerfinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64b9cc9bb0bafe61901221efe8e6c9359eef4061151cc1a35544721addc6b8f2 The package flagstealerfinal was found to contain malicious code. Source: ghsa-malware eecc837f74a9e474ce6f056e83fc505b9f1126d18a96a5eb879def906682fd...

MAL-2025-192610 Malicious code in ctfepakageflgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afb15daff30154b098e6c84f0b4c7de85afc9489566fdca3adc3013fd4034857 The package ctfepakageflgs was found to contain malicious code. Source: ghsa-malware bb83a42ae050458182d5e671b9ff648bf0eee356acb6684eac514c2144bf5683...

Malicious code in openhands-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3094854e6f43f64c218e6ccdf21f319cff916fef4a412442faccf4b9cd616fe9 The package openhands-frontend was found to contain malicious code. Source: ghsa-malware...

Malicious code in callback-hook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b89f8889dc19bc6058a5fbd01a2ff7d154ae3229f128981e84a24bdef3f4daf The package callback-hook was found to contain malicious code. Source: ghsa-malware 1364de9f464fd8aded92e338cbdd79f31c716643bb6fb136bca46a04939132f1...

MAL-2025-192373 Malicious code in @notrainers/nobtrainer-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f897e383035341f83bc0c7357ec775c42dcf5f88689994882325daf4c5c6730 The package @notrainers/nobtrainer-sdk was found to contain malicious code. Source: ghsa-malware...

Malicious code in chai-as-deployed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ebc44576073489ddc650d352e43bee3aa036bcdc2914887eb9c36be2780e09b The package chai-as-deployed was found to contain malicious code. Source: ghsa-malware 117c632d121fc31a4f589c4d76730535c6d5b576ae6e3addab756be448c13b...

Malicious code in email-validated (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16af72446800f2251ecdda400ad30c23637f628d1487ae5c911bb4283e3fe10c The package email-validated was found to contain malicious code. Source: ghsa-malware 9f2a0d9794c8d949cc051fe3c306af63ddb55b6848d0607ef1f5d332585a2fc...