236627 matches found
EUVD-2025-199519
Malicious code in @accordproject/markdown-cli npm...
Malicious code in @accordproject/markdown-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa9047c76812b92b2e951857e7b8b36154b6662c2483ca7528bfa6af593c69c7 The package @accordproject/markdown-cli was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-199346
Malicious code in @accordproject/concerto-types npm...
EUVD-2025-199348
Malicious code in @accordproject/concerto-linter-default-ruleset npm...
EUVD-2025-199349
Malicious code in @accordproject/concerto-linter npm...
EUVD-2025-199350
Malicious code in @accordproject/concerto-analysis npm...
EUVD-2025-199335
Malicious code in @browserbasehq/stagehand-docs npm...
EUVD-2025-199336
Malicious code in @browserbasehq/mcp npm...
MAL-2025-191194 Malicious code in @browserbasehq/director-ai (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b86bd8a3bb8b027a0b305fca0e5616b1f8cfee1229e47609ef43a14edb2ad0c6 The package @browserbasehq/director-ai was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-199338
Malicious code in @browserbasehq/bb9 npm...
MAL-2025-191209 Malicious code in @commute/market-data-chartjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e906d8b501e2641730640922fb6196f422637e4fa3c7eb6e5823dc3f6301026c The package @commute/market-data-chartjs was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-199326
Malicious code in @commute/market-data npm...
MAL-2025-191205 Malicious code in @clausehq/flows-step-taskscreateurl (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aea06d73112475520b51b21f45ccc22e8ddcf55245e7045f7efcdeefda036595 The package @clausehq/flows-step-taskscreateurl was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-199330
Malicious code in @clausehq/flows-step-sendgridemail npm...
EUVD-2025-199334
Malicious code in @chtijs/eslint-config npm...
@actbase/react-native-fast-image contains malware after npm account takeover
On November 24th 2025, a new supply chain attack called Shai-Hulud 2.0 was launched. This package contains the malicious code that attempts to harvest credentials and infect GitHub and npm repositories. The malicious software executes during the pre-install phase and attempts to harvest credentia...
@accordproject/concerto-metamodel contains malware after npm account takeover
On November 24th 2025, a new supply chain attack called Shai-Hulud 2.0 was launched. This package contains the malicious code that attempts to harvest credentials and infect GitHub and npm repositories. The malicious software executes during the pre-install phase and attempts to harvest credentia...
@actbase/react-kakaosdk contains malware after npm account takeover
On November 24th 2025, a new supply chain attack called Shai-Hulud 2.0 was launched. This package contains the malicious code that attempts to harvest credentials and infect GitHub and npm repositories. The malicious software executes during the pre-install phase and attempts to harvest credentia...
@actbase/react-native-simple-video contains malware after npm account takeover
On November 24th 2025, a new supply chain attack called Shai-Hulud 2.0 was launched. This package contains the malicious code that attempts to harvest credentials and infect GitHub and npm repositories. The malicious software executes during the pre-install phase and attempts to harvest credentia...
@accordproject/markdown-it-cicero contains malware after npm account takeover
On November 24th 2025, a new supply chain attack called Shai-Hulud 2.0 was launched. This package contains the malicious code that attempts to harvest credentials and infect GitHub and npm repositories. The malicious software executes during the pre-install phase and attempts to harvest credentia...