MAL-2025-190737 Malicious code in @ensdomains/solsha1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c4a8798162224fba85c25e8c01bb31790ea20f33f47fbe558eb659c197e0a4e The package @ensdomains/solsha1 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190781 Malicious code in scgsffcreator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca94ec4e3681855a45287e7aebaa6293b5416e803022d7fb318e447cd18f49bc The package scgsffcreator was found to contain malicious code. Source: ghsa-malware 57471dc81b8368989c69a7f00f7b480aa7036def63b216094e6aca18730e0a16...

EUVD-2025-198793

Malicious code in @ensdomains/curvearithmetics npm...

Malicious code in @ensdomains/ccip-read-dns-gateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ddc155befe014da7ce46a7c122655187ecfb495a9af39726b73de5be9ad4f8c The package @ensdomains/ccip-read-dns-gateway was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198800

Malicious code in atrix npm...

EUVD-2025-198652

Malicious code in exact-ticker npm...

EUVD-2025-198653

Malicious code in @orbitgtbelgium/orbit-components npm...

EUVD-2025-198654

Malicious code in react-library-setup npm...

Malicious code in react-library-setup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd7f28e9ee69ccd4dc343423efa26fbdc798388c2d4abdb85588cc5a532dd2c3 The package react-library-setup was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198657

Malicious code in orbit-nebula-draw-tools npm...

MAL-2025-190689 Malicious code in @trigo/pathfinder-ui-css (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17172dc9e8dbb38a33e93a30996ed58f73c89d22d064635c816f92f8697a5013 The package @trigo/pathfinder-ui-css was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198661

Malicious code in eslint-config-trigo npm...

EUVD-2025-198662

Malicious code in @trigo/fsm npm...

EUVD-2025-198663

Malicious code in @trigo/atrix npm...

EUVD-2025-198665

Malicious code in trigo-react-app npm...

EUVD-2025-198667

Malicious code in @trigo/eslint-config-trigo npm...

Malicious code in @trigo/jsdt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff5aae2e5762514a4d2a304a2ceb36d9b895c8bd88c9a6303752aea4b078119f The package @trigo/jsdt was found to contain malicious code. Source: ghsa-malware 91f1b0ba55c42b887eade435580838bef529a7fe7a9b9fd8b3cd05ada0528cc7 An...

EUVD-2025-198670

Malicious code in @trigo/jsdt npm...

EUVD-2025-198671

Malicious code in bool-expressions npm...

Second Sha1-Hulud Wave Affects 25,000+ Repositories via npm Preinstall Credential Theft

Multiple security vendors are sounding the alarm about a second wave of attacks targeting the npm registry in a manner that's reminiscent of the Shai-Hulud attack. The new supply chain campaign, dubbed Sha1-Hulud , has compromised hundreds of npm packages, according to reports from Aikido,...