EUVD-2025-201136

Malicious code in chai-test-await npm...

EUVD-2025-201110

Malicious code in self-service-portal-prod npm...

MAL-2025-192288 Malicious code in self-service-portal-prod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e4de1ac227f5bbfb5b8aead3c1eeccbaeaa77d15ff7575b83b4d7899c380eda The package self-service-portal-prod was found to contain malicious code. Source: ghsa-malware...

Shai Hulud 2.0, now with a wiper flavor

In September, a new breed of malware distributed via compromised Node Package Manager npm packages made headlines. It was dubbed "Shai-Hulud", and we published an in-depth analysis of it in another post. Recently, a new version was discovered. Shai Hulud 2.0 is a type of two-stage worm-like malwa...

EUVD-2025-201118

Malicious code in elf-stats-frostbitten-pantry-235 npm...

EUVD-2025-201119

Malicious code in elf-stats-candystriped-chimney-879 npm...

Malicious code in elf-stats-aurora-toy-659 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d91ae0169f112f2142e3793ee5f5fea9aebc352c6969c276ba2e5d31bd03f2a The package elf-stats-aurora-toy-659 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192278 Malicious code in elf-stats-aurora-toy-659 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d91ae0169f112f2142e3793ee5f5fea9aebc352c6969c276ba2e5d31bd03f2a The package elf-stats-aurora-toy-659 was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2025-201120

Malicious code in elf-stats-evergreen-pantry-410 npm...

EUVD-2025-201112

Malicious code in elf-stats-sprucey-fireplace-355 npm...

MAL-2025-192284 Malicious code in elf-stats-sprucey-fireplace-355 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 164ecc7e7d859834f4c5c8e0da6104968a639d74eb7f89af69b1e593e4a01207 The package elf-stats-sprucey-fireplace-355 was found to contain malicious code...

EUVD-2025-201122

Malicious code in elf-stats-joyous-train-754 npm...

Malicious code in elf-stats-joyous-train-754 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70924acfcfff679da3cc15d9269dba2c828177415d2db41a7e87f432abf8f447 The package elf-stats-joyous-train-754 was found to contain malicious code...

EUVD-2025-201125

Malicious code in elf-stats-twinkling-ribbon-344 npm...

EUVD-2025-201117

Malicious code in elf-stats-mulled-nightcap-782 npm...

Malicious code in elf-stats-mulled-nightcap-782 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1754b82eccb103258150db62b62845428519c343aa46a0337610f74344af221e The package elf-stats-mulled-nightcap-782 was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2025-201111

Malicious code in @bhyolken/echotest npm...

EUVD-2025-201124

Malicious code in elf-stats-merry-cookiejar-139 npm...

EUVD-2025-201021

Malicious code in elf-stats-silvered-star-676 npm...

Malicious code in elf-stats-silvered-star-676 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23e0c5d80322f4f7966732f58a94943b3edfd619151b911456c0e5bdd1be3820 The package elf-stats-silvered-star-676 was found to contain malicious code...