Malicious code in utility-kit-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d4f4654f1acbc26d30e2ea0cae4816bf6e3a847dce2456134d050a38a8a575 The package's default export getPlugin issues a fetch to the hardcoded bare-IP URL https://31.97.137.157:45000/icons/109 and passes the returned...

MAL-2026-10492 Malicious code in font-huge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a529537a0875d6ab8e2c942ace1db227c7131ff06b7eb4e86b12cd4193da4879 font-huge advertises itself as a font/icon collection, but its exported getPlugin function fetches https://svganchordev.net/icons/107 and passes the...

Malicious code in font-huge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a529537a0875d6ab8e2c942ace1db227c7131ff06b7eb4e86b12cd4193da4879 font-huge advertises itself as a font/icon collection, but its exported getPlugin function fetches https://svganchordev.net/icons/107 and passes the...