Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

EUVD-2025-198669

Malicious code in @trigo/node-soap npm...

Malicious code in @trigo/node-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c68fcc8b44cce3e356e21d793a260c66c48b40eb7283140b4e1e1f3ccc191660 The package @trigo/node-soap was found to contain malicious code. Source: ghsa-malware 5e716e9be0271391b5264d23544b7f5de65a55b9fdf09ef9b7c05dc2050209...

MAL-2025-190688 Malicious code in @trigo/node-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c68fcc8b44cce3e356e21d793a260c66c48b40eb7283140b4e1e1f3ccc191660 The package @trigo/node-soap was found to contain malicious code. Source: ghsa-malware 5e716e9be0271391b5264d23544b7f5de65a55b9fdf09ef9b7c05dc2050209...