Malicious code in diskho (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03f656f5769803487abac8cada65f7f7a80d04ecbb9c39633408b2c48a157b5 The package diskho was found to contain malicious code. Source: ossf-package-analysis b944051826f01c581baeba101564a1e463b08dc5ba4353b9598eff67ebddc9f...

EUVD-2026-0934

Malicious code in shop-state npm...

Malicious Package

Overview tiny-model-update is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2026-0935

Malicious code in tiny-model-update npm...

MAL-2026-43 Malicious code in published_at (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6089f817f79b6c53b35373aac18fd90de2fba2940ba8daa1286c5d82ede4a9c The package publishedat was found to contain malicious code. Source: ghsa-malware dcecd48f5e6fb3589ec38336393f753621839d5278f70c28e6349129fd2eb39b An...

Malicious code in spire.officejs-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d5bc6046960bccab3120bb794cc2c868fa2bb41e0d35028f39e2e9ca9033a80 The package spire.officejs-common was found to contain malicious code. Source: ossf-package-analysis...

MAL-2026-34 Malicious code in atm_bmw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca0601b1d8613895ac524d33f93ab92365d464e80eb526e58e2ca919abba129 The package atmbmw was found to contain malicious code. Source: ghsa-malware 20fd437233c7e774bdca9f661a997a94bd0d8373866763c3638f9bc12c588c5e Any...

EUVD-2026-0796

Malicious code in blobhunter-depconf-poc npm...

EUVD-2026-0770

Malicious code in dstny-utils npm...

Malicious code in dstny-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b284da9586db3d25955c197277419786676841a572ee83eb99a463072eff3dec The package dstny-utils was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in ipvision-selfcare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 355639090b049714637ef2cba9b4ce6ae9661ba872dc9e1aec6a69bb28ae81f1 The package ipvision-selfcare was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2026-0771

Malicious code in ipvision-selfcare npm...

Malicious code in usaa-authentication-mocks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a5999336978a30fd47577fe435eed35bf96e170df76a88933d137a64e5d2d0 The package usaa-authentication-mocks was found to contain malicious code. Source: ghsa-malware...

MAL-2026-16 Malicious code in fix-cc-raiesy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17aa6cbdc4986ee5b3aa8c4ea5e5a4dc3ddfc9f7d266bdde5f9d81445551cb73 The package fix-cc-raiesy was found to contain malicious code. Source: ghsa-malware 8e5d10de64ca997908f8b7ba463f0bc41b2553f4d883ab13b6e9f7a4fa5d387e...

MAL-2026-18 Malicious code in initializers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfa9db2df654753e6f6ebb5f77fd9607441b642e1da3306fbf8a1909fb41c179 The package initializers was found to contain malicious code. Source: ghsa-malware e0374b8e7835a603949d751a91405b851c622bd8536d96cf80a9b092fca15c35 A...

MAL-2026-11 Malicious code in cc-double-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f70cef7c9872833a60083bf6c209e3c0820db61d4350689db8b2480b58026874 The package cc-double-1 was found to contain malicious code...

MAL-2026-20 Malicious code in kid-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bc35802113ea5c7ac4e3d956e72af4ce3fbc5a9b3b8fc4c9d610d158d65250a The package kid-api was found to contain malicious code...

EUVD-2026-0736

Malicious code in initializers npm...

EUVD-2026-0730

Malicious code in tickncook-robot npm...

Malicious code in fix-cc-raiesy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17aa6cbdc4986ee5b3aa8c4ea5e5a4dc3ddfc9f7d266bdde5f9d81445551cb73 The package fix-cc-raiesy was found to contain malicious code. Source: ghsa-malware 8e5d10de64ca997908f8b7ba463f0bc41b2553f4d883ab13b6e9f7a4fa5d387e...