EUVD-2025-199436

Malicious code in @productdevbook/motion npm...

Malicious code in @oku-ui/motion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e93c9480f3e0eb944aabc540b3632ec18584ccd90aa5a041c10a5f5b7b2a37a The package @oku-ui/motion was found to contain malicious code. Source: ghsa-malware 8b014f6399b1aca00d79587642fc63ab15d16cb1a2ab7f0bd541da45664d891a...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...