MAL-2026-198 Malicious code in shopee-chat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ba8299c56484696126f8c09607e181246e87dd9c5f6a18cee51aec5d1f5ddd8 The package shopee-chat was found to contain malicious code. Source: ghsa-malware 052cf5d16ba6c226e8563598b02f71cc8f9bddb733c4074426526c4e860c66b8 An...

Malicious code in wac-relay-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6742f4abdd6851c0f1a4f003f84ac7dca306f8b29a0bf39ad8e41b12a9680d32 The package wac-relay-runtime was found to contain malicious code. Source: ghsa-malware...

MAL-2026-202 Malicious code in wac-relay-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6742f4abdd6851c0f1a4f003f84ac7dca306f8b29a0bf39ad8e41b12a9680d32 The package wac-relay-runtime was found to contain malicious code. Source: ghsa-malware...

MAL-2026-199 Malicious code in vet-bones (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3ce97e3af4cf9c82b0a51f4b693273ac59c6b1357b445b5613fbdcf7edec9a9 The package vet-bones was found to contain malicious code. Source: ghsa-malware 963e426141db06e18a04d497aed8ab05c8c6acfc76e6570d7c4a0bd2d81d7658 Any...

Malicious code in wac-react-dom (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3574245c1ec6c0d46b337b9600a38046ef129489605e5e108fcaaed753d50c9 The package wac-react-dom was found to contain malicious code. Source: ghsa-malware 483203b2478e5e472201a6f6d8efef0353ca7fb2ccf429996cc59e2574b2e497...

Malicious code in resto_ui_components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd3404a7cf3642d3e49538ae488a44a564dc5dd94102302ab33814b62e4427a The package restouicomponents was found to contain malicious code. Source: ghsa-malware...

MAL-2026-197 Malicious code in resto_ui_components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd3404a7cf3642d3e49538ae488a44a564dc5dd94102302ab33814b62e4427a The package restouicomponents was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview n8n-nodes-vbmkajdsa-uehfitvv-ueqjhhhksdlkkmz is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

Malicious code in n8n-nodes-hfgjf-irtuinvcm-lasdqewriit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4dabf38b16acea59219df3a3f57a396f3ebe958985096579cd43c419609b764 The package n8n-nodes-hfgjf-irtuinvcm-lasdqewriit was found to contain malicious code. Source: ghsa-malware...

EUVD-2026-1827

Malicious code in yunxohang10 npm...

EUVD-2026-1825

Malicious code in yunxohang11 npm...

EUVD-2026-1830

Malicious code in yunxohang5 npm...

EUVD-2026-1831

Malicious code in yunxohang4 npm...

EUVD-2026-1828

Malicious code in yunxohang7 npm...

MAL-2026-185 Malicious code in yunxohang5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b8411b8cd6fea01585a7c07048bb6880d2d0fe380b145a797bce43b1e96388 The package yunxohang5 was found to contain malicious code. Source: ghsa-malware bef3f7dd8a9554ed61db94960f012c42f81192bb019b989608cd9db4e50dfb78 Any...

Malicious code in shreddit.styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cce1be43bf6e26a99a58a3f011f71a44d06f3227d24bf2274c9f3b41c0fc3de The package shreddit.styles was found to contain malicious code. Source: ghsa-malware 2c65bd95325c1ee64e6f0b45b33b62af1973c49ed5c4eed64c725d08a51201b...

EUVD-2026-1832

Malicious code in chai-tests-async npm...

Malicious code in dotenv-intended (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 321eaa257985bd47bbf31b2f7ccdaef2df5b424b7b257400a48140ef6029e670 The package dotenv-intended was found to contain malicious code. Source: ghsa-malware df2195d5589f3e44d82053db7cd9ae186dfd168b35c9db8f97baa29f0c63612...

EUVD-2026-1833

Malicious code in dotenv-intended npm...

Malicious code in jwtdapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5222fd8fda1f00da9cfbd3e5bd457aaa90b6ea456aeb1ae2b9a5448dedc46b62 The package jwtdapp was found to contain malicious code. Source: ghsa-malware 916f8af27ab4818456f9abe642d6c4bcd8d3126e510e5a46e516a0fd45785d7d Any...