Malicious code in ventrix-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82b68f964850d0777c1f3993c52e3b66dc425b02ee82fb33bcd958514f730926 [email protected] ships a loader that, when the package's default getPlugin export is invoked, performs an HTTP request to the hardcoded endpoint...

MAL-2026-10071 Malicious code in polymarket-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63a4eba33a56521a94e4e0b3ab2923d58b0c5cd398c791e36433536591a1d6ff Package name and description advertise a 'Polymarket API SDK', but the shipped code contains no Polymarket functionality. The exported getPlugin help...