EUVD-2026-1975

Malicious code in llamaindex-js npm...

EUVD-2026-1978

Malicious code in milvus-js npm...

MAL-2026-231 Malicious code in pinecone-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c597ee3d643e51ba6eca0553a77be1c79a3e5dc72d8450b09b7f405a558d2d56 The package pinecone-js was found to contain malicious code. Source: ghsa-malware 0e6ef1006a92156684ab8d3e78ab8e036d4c27f591eba5212441a68be8231a66 An...

EUVD-2026-1979

Malicious code in huggingface-js npm...

EUVD-2026-1982

Malicious code in experimental-utils npm...

EUVD-2026-1981

Malicious code in firestore-types npm...

EUVD-2026-1983

Malicious code in auth-types npm...

Malicious code in firestore-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36f49fdc3a0333a330d1304e9ed3b86ba15d469d01211eb308e3af670ec718ee The package firestore-types was found to contain malicious code. Source: ghsa-malware 9fbe3c1ce15b13f945553f027e3d9181facdc632eb1c9d25a12c570a8fe859e...

Malicious code in analytics-browser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d14b7ad7441a8663be12ffffb8132ef2a0b0124006d5df1b3448d6f722e4f808 The package analytics-browser was found to contain malicious code. Source: ghsa-malware...

Malicious code in gradle-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2250213d706eee1473dafe9b75172ac8e22adbf885bf28e4b2b85270de1ffbc8 The package gradle-plugin was found to contain malicious code. Source: ghsa-malware 0d6c8dc0207f1992c957598d80609ff61b750f041d94dde7984a3e0a6133d54e...

EUVD-2026-1980

Malicious code in gradle-plugin npm...

MAL-2026-215 Malicious code in auth-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec0897a10b33b937c04d8f134ccac05ecdfd6050bbfaffbb07cd3ade9256bd24 The package auth-types was found to contain malicious code. Source: ghsa-malware 1096a2a969c582b5029b85a0c4eb85eec4d53f96c178a1523abe0978392a139d Any...

MAL-2026-217 Malicious code in experimental-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 946fb0e9d7a8c7da433d27ef4005111b34c3e75f8827686d43696855315d5867 The package experimental-utils was found to contain malicious code. Source: ghsa-malware...

MAL-2026-214 Malicious code in analytics-browser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d14b7ad7441a8663be12ffffb8132ef2a0b0124006d5df1b3448d6f722e4f808 The package analytics-browser was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview @t4i-cms-components/contact-card is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

Malicious code in @workleap-ai/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2800f2cfba8ac6e7a16ef977484e4da4d360c859848daedb5220c7d3595653e1 The package @workleap-ai/shared was found to contain malicious code. Source: ghsa-malware...

EUVD-2026-1986

Malicious code in @workleap-ai/shared npm...

Malicious code in @t4i-cms-components/contact-card (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7daa695b6aa59e8369fb05292fc589bf605f2648c9e66dd008e7c91314bb820e The package @t4i-cms-components/contact-card was found to contain malicious code. Source: ghsa-malware...

Malicious code in lyonscg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6791a364a3883b50ac1feb3bb08141b23eed486a353598186e65a4aa1983cc2c The package lyonscg was found to contain malicious code. Source: ghsa-malware 9610f0b045d1d115ea15f2ebafba8ad33767f1a997a38ed2b85b55a0c58cfdd0 Any...

EUVD-2026-1994

Malicious code in rxjs-js npm...