Malicious code in undefsafe-typed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71757e5cdef13d215b8506dfd5b00831fc29a7a24e208472c79fd40c2abe7967 The package undefsafe-typed was found to contain malicious code. Source: ghsa-malware 1a19664890dd6d9bba23c333e1095114841ef498dec4eaa02c1bff38bc80aa4...

Malicious code in @caretive/caret-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dbdd6e96adf12b150ce3a286faf8fcab904140af31ec590599a3c1c01a3ba12 The package @caretive/caret-cli was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190853 Malicious code in open2internet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbe1cf5da09eaf98a63e880a56f10409eaec90f40d9d3a7938b4bea09aeada36 The package open2internet was found to contain malicious code. Source: ghsa-malware 7df2207057942014062d4c686449d02043f6f221e63ee8014453f995f1429200...

Malicious code in @actbase/react-native-tiktok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e30674f65fae1c8cebcf4d015086a943502402cc93f3559653c406c592a62366 The package @actbase/react-native-tiktok was found to contain malicious code. Source: ghsa-malware...

Malicious code in @ensdomains/ccip-read-worker-viem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57b104a492d5893772494de67a98f0114e695a8d24e0444d12d0963029fc4b32 The package @ensdomains/ccip-read-worker-viem was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49381 Malicious code in huangming-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53612bb1244997357931275dea1924a477215c7db7ab8297f2fead735926859e The package huangming-demo was found to contain malicious code. Source: ghsa-malware 503c69173f37b1e6d7f159b77bb5f5a3bb677dff293fb44f2a09038a31172fdb...

MAL-2025-49387 Malicious code in xss-payload-7n-ctf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc9fcaefcc21332259306a4bbad6a54cda89ef8c6d4874d5176f4bf8f9cb194c The package xss-payload-7n-ctf was found to contain malicious code. Source: ghsa-malware...

Malicious code in tailwindcss-gustify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1671650b65b4934845aada45f513b1bea7032ea94d90f9e1517e60bce563b621 The package tailwindcss-gustify was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49375 Malicious code in rbx-reader-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26b8d14a0bd74bf3ed3daec6aa05cdff66d71efb652ea3727f5eee4812f39293 The package rbx-reader-ts was found to contain malicious code. Source: ghsa-malware e2cc8e418629e96adc1f49efc1c9e67a21f94eb0594d1e6a66ce25023f0afcc4...

Malicious code in aes-valid-ipherv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f22d763f4c915454a17152533dbf628f16eef45bf66f27ecf13414baa94002c The package aes-valid-ipherv was found to contain malicious code. Source: ghsa-malware 22297960d5b9fc9c09290fc460a632ff653b9b660089fa10ffff05c2efc053...

Malicious code in sai-tg-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b13c29b341c706e72066be2c2c8227189924ec9438d5e2ae7944484b2af63375 The package sai-tg-api was found to contain malicious code. Source: ghsa-malware 5a9fb1188aa41761a69996f43b3f4551ba995a153cb1ca06ee384db1331d27fc Any...

Malicious code in sabaoa-tg-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 555fda036bf0012711b8105d10f56495dc602cd4bae8463de43ca9cd3c404a1b The package sabaoa-tg-api was found to contain malicious code. Source: ghsa-malware 6876d341cb9d5baf0af61f7e2fba4237ef32a159e156fa127940553d73e1a571...

Malicious code in ve-hemi-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1ce1c8c14c652c22fede3ed26692b173255af2cebbbfe34e91d78ade7b5f9eb The package ve-hemi-actions was found to contain malicious code. Source: ghsa-malware 13edaf6e255d735724b90e45ce9e8ab5c1d6e0f0474ca23ed567341e4a08183...

Malicious code in esg-odf-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55bab458b0a0de6c4110ff28d0306c52de1e31805de0c76f8f188e2c823b28b7 The package esg-odf-common was found to contain malicious code. Source: ghsa-malware 610621a777be160598ba0a95213ed5f2e5645ce0806077fb9f2d1ef65fcdddfb...

MAL-2025-49071 Malicious code in xo-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44b06297a4f222643e8b7a977e7dfd944c0a2666d5066f0db0a61674b2ea84a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in twilio-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20ffcb178cf9c4a8cc2e9e550a170ff42fa42a341a71eb80330990ce0fc4fe3d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48991 Malicious code in crowdstrike (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11cd49b95ecfbbbeedc96c140184f8543c29b3a6b60688c32bb40459bd164a76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49076 Malicious code in xo-validation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a2dc971622a44de97536e68fb7287ef32a7a1bdabe0d0386eadf248219cea54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ts-react-important-stuff (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f663ee64d0eec8043b09ffac22066bd7622e149084a6cb99f128fe1f0ee245e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chai-friendly (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d91de03ddaa79c1b3653f7324f3c8a2041bc2e0eb7082649efe9ee495d1a4eb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...