MAL-2025-37292 Malicious code in tulip-frost-zlc923-project (npm)

The package tulip-frost-zlc923-project was found to contain malicious code...

MAL-2025-9785 Malicious code in @zalastax/nolb-_ask (npm)

The package @zalastax/nolb-ask was found to contain malicious code...

MAL-2025-14405 Malicious code in altair-prettier-node-config-prosthetics (npm)

The package altair-prettier-node-config-prosthetics was found to contain malicious code...

MAL-2025-36969 Malicious code in titan-quince-idp5 (npm)

The package titan-quince-idp5 was found to contain malicious code...

101 (>=0.3.0 <=0.7.1), 3c (>=0.0.1 <=1.0.0-alpha) +3346 more potentially affected by unknown CVE via handlebars (>=1.0.10 <=3.0.3)

handlebars NPM version =1.0.10, =0.3.0, =0.0.1, =0.0.1, =1.0.0, =1.0.1, =1.0.0, =1.31.0, =0.1.16, =0.9.33, =0.9.33, =5.0.2, =5.0.3, =5.0.6, =5.0.7 and more Source cves: unknown CVE Source advisory: OSV:GHSA-Q42P-PG8M-CQH6...