EUVD-2026-3058

Malicious code in sd-agent-toolbar-module-client npm...

EUVD-2026-3059

Malicious code in sd-active-conversation-module-client npm...

EUVD-2026-3082

Malicious code in chakra-ui-2--react-utils npm...

Malicious code in @spx-delivery/react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b03f32e2859ef16f71897fc985589e436c704979df087b57bb61fedb63e89c51 The package @spx-delivery/react was found to contain malicious code. Source: ghsa-malware...

EUVD-2026-3093

Malicious code in spire.officejs-externs npm...

EUVD-2026-3098

Malicious code in omnicore-ds2-sdk2 npm...

EUVD-2026-3090

Malicious code in vuefrontendrpc npm...

EUVD-2026-3077

Malicious code in comstrap npm...

EUVD-2026-3072

Malicious code in focus-trap-v2 npm...

Malicious code in focus-trap-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54f9667b65219caefb7d526b0ab3787b23c76689e9858e281ce10c5a744ffd10 The package focus-trap-v2 was found to contain malicious code. Source: ghsa-malware e80cecdd51ca03a6a75b249c73d4a4efda03c84e9bdc4a1ba3b2b66cbfd8c82d...

Malicious code in @spx-workforceops/shared-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e3a2bf3fdf03e628dd6981636169c3053e7aa01b62d709e07a1e13184f0b93 The package @spx-workforceops/shared-vue was found to contain malicious code. Source: ghsa-malware...

Malicious code in omnicore-ds2-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c3582de0d77fa95932500d8933267b336557148b45ed5f23d090e2982962d9e The package omnicore-ds2-sdk was found to contain malicious code. Source: ghsa-malware 7990efbda2464df9633bde060381ff6c9ec75fa286fafb46cc27b4a16c6a98...

EUVD-2026-3086

Malicious code in auc-2-lib npm...

EUVD-2026-3061

Malicious code in originresponsehandler npm...

EUVD-2026-3068

Malicious code in lead-ion npm...

MAL-2026-279 Malicious code in dibels8-content (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0822fb035f2f2b218e9bbb86896773e4f423334de708e5fe40ab853a4d22abfe The package dibels8-content was found to contain malicious code. Source: ghsa-malware 68b763b414011b0fcdc784120c3cc7890b7a8bff93ba2d0ea2f43df38880f97...

MAL-2026-290 Malicious code in kc-fe-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4347dd194760b4442f9bb1feab4f7133c2413af7958a4081f8cdea8367241da The package kc-fe-cli was found to contain malicious code. Source: ghsa-malware 42b0817927a50dccc81b965c476f842127ddf7f97445006910ebc9f6fa9e8026 Any...

MAL-2026-259 Malicious code in @riag-libs/pattern-library-react-hooks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64366b918bd4380cf8b087a445df7d86ef18b21686c577a9ed7bdd523aceac64 The package @riag-libs/pattern-library-react-hooks was found to contain malicious code. Source: ghsa-malware...

MAL-2026-315 Malicious code in tailwind-merge-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe4dad53bfa4f2ffe409644975e17958c4a1ab064109707aa6d944c1030b959 The package tailwind-merge-v2 was found to contain malicious code. Source: ghsa-malware...

MAL-2026-286 Malicious code in forms-new-design (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cf1f5f8d78c6e26b45ef4a895859922f68ff7afb558284111a34f497681b324 The package forms-new-design was found to contain malicious code. Source: ghsa-malware 45f98af63ec853b571da818f8d974890156b0fd52c9c2ab3fa74a4e213ff3f...