EUVD-2026-0934

Malicious code in shop-state npm...

MAL-2026-48 Malicious code in shop-state (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5afad53032ae0acf7c8b481c6f0bd05fc4a1c283de24285d35b19a376cfa1b10 The package shop-state was found to contain malicious code. Source: ossf-package-analysis...

Malicious Package

Overview tiny-model-update is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2026-0935

Malicious code in tiny-model-update npm...

MAL-2026-43 Malicious code in published_at (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6089f817f79b6c53b35373aac18fd90de2fba2940ba8daa1286c5d82ede4a9c The package publishedat was found to contain malicious code. Source: ghsa-malware dcecd48f5e6fb3589ec38336393f753621839d5278f70c28e6349129fd2eb39b An...

EUVD-2026-0939

Malicious code in publishedat npm...

EUVD-2026-0942

Malicious code in spire.officejs-document npm...

Malicious code in spire.officejs-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d5bc6046960bccab3120bb794cc2c868fa2bb41e0d35028f39e2e9ca9033a80 The package spire.officejs-common was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2026-0940

Malicious code in spire.officejs-editors npm...

MAL-2026-40 Malicious code in spire.officejs-editors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a16e661181ec9b4834133423f88991671288814200d66aa148195cc9c06b5aff The package spire.officejs-editors was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in atm_bmw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca0601b1d8613895ac524d33f93ab92365d464e80eb526e58e2ca919abba129 The package atmbmw was found to contain malicious code. Source: ghsa-malware 20fd437233c7e774bdca9f661a997a94bd0d8373866763c3638f9bc12c588c5e Any...

MAL-2026-34 Malicious code in atm_bmw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca0601b1d8613895ac524d33f93ab92365d464e80eb526e58e2ca919abba129 The package atmbmw was found to contain malicious code. Source: ghsa-malware 20fd437233c7e774bdca9f661a997a94bd0d8373866763c3638f9bc12c588c5e Any...

EUVD-2026-0796

Malicious code in blobhunter-depconf-poc npm...

MAL-2026-32 Malicious code in blobhunter-depconf-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f921f8e8c11a044b483aa7c500c15b42917baa7ef4489b8301c564088fd4b7e3 The package blobhunter-depconf-poc was found to contain malicious code. Source: ghsa-malware...

EUVD-2026-0770

Malicious code in dstny-utils npm...

Malicious code in dstny-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b284da9586db3d25955c197277419786676841a572ee83eb99a463072eff3dec The package dstny-utils was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in ipvision-selfcare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 355639090b049714637ef2cba9b4ce6ae9661ba872dc9e1aec6a69bb28ae81f1 The package ipvision-selfcare was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2026-0771

Malicious code in ipvision-selfcare npm...

Malicious code in usaa-authentication-mocks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a5999336978a30fd47577fe435eed35bf96e170df76a88933d137a64e5d2d0 The package usaa-authentication-mocks was found to contain malicious code. Source: ghsa-malware...

Malicious code in ent-profile-unauth-msr-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cccedcc6e7e3c24d5bf3abeb2d093bb12520a9973d6aaf7874d6559127e947c The package ent-profile-unauth-msr-stop was found to contain malicious code. Source: ghsa-malware...