EUVD-2025-198657

Malicious code in orbit-nebula-draw-tools npm...

Malicious code in @orbitgtbelgium/time-slider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e31786ffabd43155f6f44bff0d14b7e2d5d7b4dd88bd5720bb7496f6608f9de5 The package @orbitgtbelgium/time-slider was found to contain malicious code. Source: ghsa-malware...

Malicious code in react-element-prompt-inspector (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58c142c9370bed76cfd7eb230462162a911d50057bbbc351f019dae4a8208784 The package react-element-prompt-inspector was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190689 Malicious code in @trigo/pathfinder-ui-css (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17172dc9e8dbb38a33e93a30996ed58f73c89d22d064635c816f92f8697a5013 The package @trigo/pathfinder-ui-css was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198661

Malicious code in eslint-config-trigo npm...

Malicious code in @trigo/fsm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d47f4a2a33c66b0dd4885e14a3daac5b93ab92ff16f42af9a40c7883bc0a8fe7 The package @trigo/fsm was found to contain malicious code. Source: ghsa-malware 3a0c1d2449da835d77ebed8c99e152a8d6a2015eb1ce5d754808650e257c7776 Any...

EUVD-2025-198662

Malicious code in @trigo/fsm npm...

MAL-2025-190685 Malicious code in @trigo/fsm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d47f4a2a33c66b0dd4885e14a3daac5b93ab92ff16f42af9a40c7883bc0a8fe7 The package @trigo/fsm was found to contain malicious code. Source: ghsa-malware 3a0c1d2449da835d77ebed8c99e152a8d6a2015eb1ce5d754808650e257c7776 Any...

Malicious code in @trigo/atrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 558f6feeb49a87304641f2c0c9925edfed565c25407412c22ec77f6dd814dc4f The package @trigo/atrix was found to contain malicious code. Source: ghsa-malware 305ce62c26f6bb221f9779da6dd55b49fd970a1bf8939a813a5951bb2e4f5a07 A...

EUVD-2025-198663

Malicious code in @trigo/atrix npm...

Malicious code in @trigo/atrix-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e14a54095c9b7bc146d414230ec3c364d9dfb381dd4554ec3003ac116e69824 The package @trigo/atrix-postgres was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198665

Malicious code in trigo-react-app npm...

EUVD-2025-198667

Malicious code in @trigo/eslint-config-trigo npm...

Malicious code in @trigo/jsdt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff5aae2e5762514a4d2a304a2ceb36d9b895c8bd88c9a6303752aea4b078119f The package @trigo/jsdt was found to contain malicious code. Source: ghsa-malware 91f1b0ba55c42b887eade435580838bef529a7fe7a9b9fd8b3cd05ada0528cc7 An...

EUVD-2025-198670

Malicious code in @trigo/jsdt npm...

MAL-2025-190693 Malicious code in bool-expressions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec2dea19a068cf577e39f58533ccea7e2c6b5b0c9850de785f955a8f3304e2c9 The package bool-expressions was found to contain malicious code. Source: ghsa-malware 26f720c7eb2f6cce9791d2ffe73797674e5f19882b33308cde262deaa43671...

EUVD-2025-198671

Malicious code in bool-expressions npm...

Second Sha1-Hulud Wave Affects 25,000+ Repositories via npm Preinstall Credential Theft

Multiple security vendors are sounding the alarm about a second wave of attacks targeting the npm registry in a manner that's reminiscent of the Shai-Hulud attack. The new supply chain campaign, dubbed Sha1-Hulud , has compromised hundreds of npm packages, according to reports from Aikido,...

MAL-2025-190678 Malicious code in @trigo/atrix-acl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1709080673e2717f0cff39ad90b7c825ced5be2378f46a4ebdceadbf9b3f184c The package @trigo/atrix-acl was found to contain malicious code. Source: ghsa-malware 52dbc146720620532d9726aeba591e83cd1d56841d1242aeebd3f160f72c0d...

Malicious code in @asyncapi/problem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 257141d8551fbc781c4df287d30e9a7e795f6759382d0ca3c20f7c46411614ec The package @asyncapi/problem was found to contain malicious code. Source: ghsa-malware...