MAL-2025-190967 Malicious code in hyperterm-hipster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1d8acfc5a1442200f373aaee149ff592b46d79a7bed57e8ffbc4dfa8ec01d61 The package hyperterm-hipster was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190986 Malicious code in pico-uid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea7b37b73a502fca8e0834485805f85161a0b6324f046227c52eaf62f81cbe61 The package pico-uid was found to contain malicious code. Source: ghsa-malware 7dfd9eb3d97c6b6064779eb385892814fd6b36cc5292943e4cd81e254668ee79 Any...

Malicious code in package-tester (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1888e34e329bc0ea8f84900de1b8ac52cf5271deb84547900790be3335b0d3e4 The package package-tester was found to contain malicious code. Source: ghsa-malware 1cd7a624ca6e7cb7928904d72a30bb889766f3c6009a09fb20758a0a29b56255...

Malicious code in css-dedoupe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7708f95527bfb987e5bf71ee911acffc550f40aff1b046d3249c9504c14fd52f The package css-dedoupe was found to contain malicious code. Source: ghsa-malware 9bad835f3386b87b3ce781849db6a96394982d6a092ee635c731d854493dd197 An...

MAL-2025-191013 Malicious code in stat-fns (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5395e07a1f1a743d77d42495c7eaf08cb0ced22a0b0883b53b5adf78beef28a The package stat-fns was found to contain malicious code. Source: ghsa-malware 6c2e197e85b015babcf3a2073e3f76b980a3ae924a49a20d9c1648c610d7d3c0 Any...

MAL-2025-191020 Malicious code in tcsp-test-vd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9f8fd99690655a6e155948c83b8baf3c7d03d10aa4adec3a8e87ed21a96921e The package tcsp-test-vd was found to contain malicious code. Source: ghsa-malware bbc33c9b0da4ee5d72787025ea4a8ca6f7c7b140ba2cb7fa40a3cf6703cb61c8 A...

MAL-2025-191024 Malicious code in tiaan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eec9aed3f08840a4f5787d8e5edb18c097459657ba29ca488daae2047709701 The package tiaan was found to contain malicious code. Source: ghsa-malware 0135c9cc2fe2d3112342fbb4e91dee9f30647a8d8bc93c0453991d8c51f4710e Any...

MAL-2025-190937 Malicious code in undefsafe-typed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71757e5cdef13d215b8506dfd5b00831fc29a7a24e208472c79fd40c2abe7967 The package undefsafe-typed was found to contain malicious code. Source: ghsa-malware 1a19664890dd6d9bba23c333e1095114841ef498dec4eaa02c1bff38bc80aa4...

MAL-2025-190938 Malicious code in uplandui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22f9a52e37653e2c0d85c55db9f1173d503391434bb0a2667b8ae8e57f1ed92b The package uplandui was found to contain malicious code. Source: ghsa-malware e26bf91e39b976ff5aa4107bd8140380fdceeb1de6c12a9fd9993d1ff16642aa Any...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview org.mvnpm:posthog-node is a PostHog Node.js integration Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...