MAL-2025-192460 Malicious code in libxmljsololo4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68adb1bbfa456e34601b15a0cc297764102d61bad2b3539927d55757a75dc67d The package libxmljsololo4 was found to contain malicious code...

MAL-2025-192449 Malicious code in elf-stats-sugarplum-mitten-141 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abe2b5ed5ab130378db923b0c43eeb9e041a1dcc51641d1fbdbc2463e69da21a The package elf-stats-sugarplum-mitten-141 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192440 Malicious code in elf-stats-candystriped-snowglobe-426 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4a0e883940b56b910fadb9d49357e4f95b49ca8988a9423683841f441823e4c The package elf-stats-candystriped-snowglobe-426 was found to contain malicious code. Source: ghsa-malware...

Malicious code in fadafas3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16f81b34db67e90a673703108039c5943f614e1a8200df3fb04eb6677ee95f15 The package fadafas3 was found to contain malicious code. Source: ghsa-malware 27efb5c05f9bd8cab5dd8d9a89240e7e1f353ecc21639fec01a91ebd8461cd61 Any...

EUVD-2025-202900

Malicious code in libxmljsololo4 npm...

Malicious code in libxmlfinal4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d41a78ad1712a21fd085e3a8188b1e5522b8140cdc8b562d5ff933ceefe923f6 The package libxmlfinal4 was found to contain malicious code...

EUVD-2025-202920

Malicious code in elf-stats-candystriped-snowglobe-426 npm...

EUVD-2025-202897

Malicious code in libxmlussr npm...

EUVD-2025-202919

Malicious code in elf-stats-cosy-garland-592 npm...

MAL-2025-192453 Malicious code in libxmlfinal4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d41a78ad1712a21fd085e3a8188b1e5522b8140cdc8b562d5ff933ceefe923f6 The package libxmlfinal4 was found to contain malicious code...

MAL-2025-192462 Malicious code in libxmlpupupu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6137dbf72252f12fd82d8b02ae9d8270288badd33f0e5324b78e1be1b349180a The package libxmlpupupu was found to contain malicious code...

MAL-2025-192456 Malicious code in libxmljs10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53b4c7fe3473ba684c279007dc4c169dd12bbec2156cdbd464551e7c313d2ede The package libxmljs10 was found to contain malicious code...

MAL-2025-192434 Malicious code in @cheqplease/structured-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f4111b892bba0089b3619c99cd5135fa3693d4a78c790a23017e359beff0cd8 The package @cheqplease/structured-logger was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-202418

Malicious code in mws-common-ui npm...

MAL-2025-192429 Malicious code in yunxohang3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c2e673bf41f2c09d7193d10d854da05f9ca7460ff6ea0aa7f20c54637ec8be6 The package yunxohang3 was found to contain malicious code. Source: ghsa-malware 0900450d580a55eafca9c4f9d12f2d00bee5c44547a809c1bb9f919b328f6350 Any...

EUVD-2025-202395

Malicious code in yunxohang3 npm...

Malicious code in yunxohang3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c2e673bf41f2c09d7193d10d854da05f9ca7460ff6ea0aa7f20c54637ec8be6 The package yunxohang3 was found to contain malicious code. Source: ghsa-malware 0900450d580a55eafca9c4f9d12f2d00bee5c44547a809c1bb9f919b328f6350 Any...

EUVD-2025-202396

Malicious code in yunxoahng2 npm...

Malicious Package

Overview real-time-tweet-streamer is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview near-fast-auth-signer is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...