Malicious code in somsodamsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 437d384f1bedaaf93abee9ecf1219d3244c96b0086ec0ed005374d28fb9d4522 The package somsodamsd was found to contain malicious code. Source: ghsa-malware ffb9c516d18ccedc5e8858843b9cfe1507126bf2d577896d21391b4f0d211a9c Any...

Malicious code in skndkjasndkjan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1db684638c7c4cc14bc030fa38952c5a81da5ae4fbfc4d8a7279f52096db4299 The package skndkjasndkjan was found to contain malicious code. Source: ghsa-malware b3faa645d3b9d269340718ff8ee7b86fa018985ce3748a7619a156fbec8fce44...

Malicious Package

Overview somesomesome is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in vuejavascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74bfba97bf13d06059aaa4317c042bd9d5400372e605f35803c29cdf82bcb9b2 The package vuejavascript was found to contain malicious code. Source: ghsa-malware 67afa0cf78a4b560d1f76b6ec9e91a607062ab8f07a96755eada02b4fdfeb2a4...

MAL-2026-581 Malicious code in somesomesomesome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 501ce83717dc490a4b5550820a3d811bc7a90579dbf986bfb3013d0997ae3802 The package somesomesomesome was found to contain malicious code. Source: ghsa-malware 6ac6ff72ae68c24308f36c03065bd3d4f95aea678ce410a4edb706f73499e6...

Malicious code in react-toast-cold (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10dcf80d6b6e15bcfb18c2f1a4211efd1c79f6f66e8aa34bbab7107a90d1da86 The package react-toast-cold was found to contain malicious code. Source: ghsa-malware dc67550f336ea3c52946bb6d0ab4f031eee7a60cc562b0fd4220750c72f086...

MAL-2026-575 Malicious code in syntax-jsx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fd1189ee316a8c3e44060564a0bbcf1fd7409333cfb2f2e5035271f94b93f27 The package syntax-jsx was found to contain malicious code. Source: ghsa-malware b04dc357cbf3cdb2e7e66b09a4ba49cd101d7f3e5be0655514403145bdbff762 Any...

Malicious code in debug-glitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f09a7eab8b255c9470cf181542b2ed5b9b214602d0c73dc089938cc1a2d546b2 The package debug-glitz was found to contain malicious code. Source: ghsa-malware 5c2a809411c1675d6b31e695ec844e233dbcc14e9c576f30d6e3491084b5b90c An...

Malicious Package

Overview debug-fmt is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview debug-glitz is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

MAL-2026-572 Malicious code in pino-debugger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7133bd631bca4144933e87ca536afdde9683d259d48d0214ed53581cf41584ee The package pino-debugger was found to contain malicious code. Source: ghsa-malware 94f20503a24b5da686e72147cd518873a372a8fe87f409e470e7b5c7ffbec055...

MAL-2026-555 Malicious code in acuitymobileapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4731a57ff93dc5dd51ce1cb0579af31f609e3dade55ff76c80e8226c6da8baa7 The package acuitymobileapp was found to contain malicious code. Source: ghsa-malware b11c104a75331254732b5987d89729fb9ac60a888d6843144f2863d391a8ff6...

Malicious Package

Overview digital-music-dynmsg-ribbon is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

MAL-2026-556 Malicious code in digital-music-dynmsg-ribbon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 539cc4d9f61bd9add970da883b5bd746b0b08614fbf948e143e6a35c606e593f The package digital-music-dynmsg-ribbon was found to contain malicious code. Source: ghsa-malware...

Malicious code in syntax-async-functions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0d14dae07d53bcd3b3da9693bf5facb7518fafafe8cc2c54d93cd59ec7a28f1 The package syntax-async-functions was found to contain malicious code. Source: ghsa-malware...

Malicious code in express-lists-routes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c51e8807ad317a804d1d70eac194db27d648b87308eaebf5e7752864c1c03e5 The package express-lists-routes was found to contain malicious code. Source: ghsa-malware...

MAL-2026-550 Malicious code in cdnhost (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dacea96d573c773c7dab188922e5a1bd655ff37114ebcee7c23d1415bc4dc4ef The package cdnhost was found to contain malicious code. Source: ghsa-malware e0181f4fe287a7879047e64112250e5009c28564cf6017ad1d2f966e706da109 Any...

Malicious Package

Overview @spx-delivery/react is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-534 Malicious code in internallib_v828 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff1fe83e3d9c31b100d3117b436d62cb5bbed907b6393fd0ae603bd365e73889 The package internallibv828 was found to contain malicious code. Source: ghsa-malware d15fc740eb3e49fec4406761a411f74ba5e572f8ead9811783ba32b4417d0db...

Malicious Package

Overview kwp-shared-components-production-system is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organizatio...