236627 matches found
@actbase/react-native-simple-video contains malware after npm account takeover
On November 24th 2025, a new supply chain attack called Shai-Hulud 2.0 was launched. This package contains the malicious code that attempts to harvest credentials and infect GitHub and npm repositories. The malicious software executes during the pre-install phase and attempts to harvest credentia...
MAL-2025-191457 Malicious code in @medusajs/medusa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aa5b0f943792c37642fca6c2ef986192e352a69adc62d136967da06a71efe27 The package @medusajs/medusa was found to contain malicious code. Source: ghsa-malware 01bb6c10c02f2427b66ecf6036cf38726397291c4de895e6c942bf3cdf78f0...
EUVD-2025-199301
Malicious code in @lui-ui/lui-vue npm...
MAL-2025-191245 Malicious code in @lui-ui/lui-vue (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59b88c15ab970fa80e2c420db246728871b310f27e35371206322bf8cea6abb1 The package @lui-ui/lui-vue was found to contain malicious code. Source: ghsa-malware 339d88eca55085f7dbfd769a5800adf59a499c0e6e14500a6f456cf17ec249f...
EUVD-2025-199270
Malicious code in quickswap-token-lists npm...
EUVD-2025-199302
Malicious code in @lui-ui/lui-tailwindcss npm...
EUVD-2025-199271
Malicious code in quickswap-smart-order-router npm...
Malicious code in quickswap-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49dcf945c1f4a044140fa8266ccef0485d549fd60e40a201830e3c0d47e5a825 The package quickswap-sdk was found to contain malicious code. Source: ghsa-malware e27417025676edb6f4f89ab42768d6676919fdcae59a91035af673ad2f0ff913...
EUVD-2025-199272
Malicious code in quickswap-sdk npm...
EUVD-2025-199273
Malicious code in quickswap-router-sdk npm...
Malicious code in quickswap-router-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed80b7ba4c6742a8930246967edfa6fc147fc7a52d957d93c89ce0a9258bd470 The package quickswap-router-sdk was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-199274
Malicious code in quickswap-default-token-list npm...
Malicious code in quickswap-default-token-list (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4b3edd2c22842f2e65d4b70184d67745f91228b3e8a335561def81900e84ddd The package quickswap-default-token-list was found to contain malicious code. Source: ghsa-malware...
MAL-2025-191239 Malicious code in @kvytech/habbit-e2e-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99bc98f56e53ded216f20185150816d9ee319d2e9570684bb920a024c92fae93 The package @kvytech/habbit-e2e-test was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-199275
Malicious code in quickswap-default-staking-list-address npm...
EUVD-2025-199276
Malicious code in quickswap-default-staking-list npm...
EUVD-2025-199305
Malicious code in @jayeshsadhwani/telemetry-sdk npm...
EUVD-2025-199240
Malicious code in vue-browserupdate-nuxt npm...