MAL-2025-191234 Malicious code in @hyperlook/telemetry-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc89d8ae1e7f05dd930ed4c9173e00320153c6bb111324358e1c6f43bc07a1db The package @hyperlook/telemetry-sdk was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191442 Malicious code in uniswap-smart-order-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dbda3147fde915a97ddd97f51f5ebc1757fa14bca7cad95f333862ad125c3c1 The package uniswap-smart-order-router was found to contain malicious code. Source: ghsa-malware...

Malicious code in @hover-design/react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50c066ac501de3af9fd156e23b5fb0317b633da301c4cf66b12f2ae8429e0970 The package @hover-design/react was found to contain malicious code. Source: ghsa-malware...

Malicious code in samesame (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b13e951b583059d1772bdd87c42fa897e1d023144e96e75720d61aa721efbf6 The package samesame was found to contain malicious code. Source: ghsa-malware a7c35b3b06e9c075dec97186d8f347918e3017121b3bc57abb571e172ad7eb61 Any...

MAL-2025-191419 Malicious code in samesame (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b13e951b583059d1772bdd87c42fa897e1d023144e96e75720d61aa721efbf6 The package samesame was found to contain malicious code. Source: ghsa-malware a7c35b3b06e9c075dec97186d8f347918e3017121b3bc57abb571e172ad7eb61 Any...

Malicious code in schob (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d511d3e995fea577f76f98db2b210a390974c05a620e22e87d9cc9a1afe4f09 The package schob was found to contain malicious code. Source: ghsa-malware 93b65cbaaf5b26ea1a1fd10e632fcfd4403760db53ca856573a70ea1bafedb0f Any...

MAL-2025-191420 Malicious code in schob (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d511d3e995fea577f76f98db2b210a390974c05a620e22e87d9cc9a1afe4f09 The package schob was found to contain malicious code. Source: ghsa-malware 93b65cbaaf5b26ea1a1fd10e632fcfd4403760db53ca856573a70ea1bafedb0f Any...

Malicious code in soneium-acs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47ef13235ddcf50988ca14c257fc3e88969c7a99cd07389710789ef758dba1f7 The package soneium-acs was found to contain malicious code. Source: ghsa-malware 0dd54268e2cc4c0ffd1059655c96c56400b08d5eb44bdf09753b1aec34aac8fa An...

MAL-2025-191431 Malicious code in sufetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8efd418803202b34256057a848e0e9fbd6ad735dd0a011b4e7ca9cd46d088b39 The package sufetch was found to contain malicious code. Source: ghsa-malware 96568dd37a7486f46399a553eecede4295c1c52321560fb15faaa4525e898642 Any...

Malicious code in tiptap-shadcn-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0749b2f0cf2a55c1736c46b2865d3ac1dfd6bf241b5242225513d0807ee512e The package tiptap-shadcn-vue was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191215 Malicious code in @everreal/react-charts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5768b8f3a3e5bd1a30a71e7ec2dccf1b55e7e06c7967fe7f40bb6cd938104716 The package @everreal/react-charts was found to contain malicious code. Source: ghsa-malware...

Malicious code in @trackstar/test-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f23787bf3317a1d48ff30444e506ed95b1c3242ab8092521a697181c736e960 The package @trackstar/test-package was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191321 Malicious code in @sme-ui/aoma-vevasound-metadata-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ced8f74d8984f217db135b6a331c5aeee6463823f29d90c9e15fa6473aa8fd3 The package @sme-ui/aoma-vevasound-metadata-lib was found to contain malicious code. Source: ghsa-malware...

Malicious code in @silgi/openapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da37d75ae054be71f7d9d4913bf4e5b1c0e7249774278432c33d89d871d99f28 The package @silgi/openapi was found to contain malicious code. Source: ghsa-malware 3c5eda9815ba5af459be6844eab3b3e9f5cb4615e738904bd8214eb62a2c93e7...

Malicious code in @silgi/module-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8dcdf459dd6f30b49693265bec20c40b3a8f9b49a11f1eef906e86ecc5741ad The package @silgi/module-builder was found to contain malicious code. Source: ghsa-malware...

Malicious code in react-packery-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c9dbf0ac814d8ad3cdd41ff8e2cebc7bf1bef909281eb89d019a8efd626d047 The package react-packery-component was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191044 Malicious code in @opentermsarchive/engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b65f79ad38dfbbbddd8ec94c40721b2c951c3bf7c76de5e109d75cd20ab25bd5 The package @opentermsarchive/engine was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191039 Malicious code in @oku-ui/label (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26f863ed3157086df61430a6d4939470a4c8cbf6bca6ae11d98f34c0c2547e45 The package @oku-ui/label was found to contain malicious code. Source: ghsa-malware d98465139dc808cd01653e8f2eab11a773fcb7ce4d9e4a339cf0bb8c07c02320...

Malicious code in pergel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0beb04dcc264a7b8ea3f1b3c48c402609868184158f6bd8615a1f81fc5a29315 The package pergel was found to contain malicious code. Source: ghsa-malware 013990a2334d492668cc0d60833e3b2a30e9578b49ca1d8a75f904b5c82e1932 Any...

MAL-2025-191134 Malicious code in nitroping (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab13b3f9a9100541d146c2728a90d45bfe20125de13d0f39196f03259918c1b9 No a static rule matches and no traced-code findings of installer-side attack behavior were produced for this package version. There is no evidence o...