MAL-2026-1361 Malicious code in pcl-build-docroot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec644efff0c2f83a615a174be4d854af6d4411fec2fd2246ce43b6118f6065fd The package pcl-build-docroot was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1355 Malicious code in @dappaoffc/baileys-mod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee2d90dce9a6d45cb24a57cb738764c3675c7b5e6a594a15f8130938bcf5a886 The package @dappaoffc/baileys-mod was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1360 Malicious code in npm-doc-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e02a5339e3c7017ad72be2bb9ed62f13b6d4aeef3450ada18af95a6203e8e105 The package npm-doc-build was found to contain malicious code. Source: ghsa-malware de3094bb10170209a4225724c5cc0934cbc551bbcf01dd6f6df0205ca158ee6a...

Malicious code in @daffadeveloper/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c4d6e1233759183f848159d1b47ee443d914e4ce13251df4518a1a5becdbc6 The package @daffadeveloper/libsignal-node was found to contain malicious code. Source: ghsa-malware...

Malicious code in tailwindcss-forms-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91e47d3466ef7beca3f6d4cc16c77c91c52a3d29dbbe4d484fcf3e2397f18d2c The package tailwindcss-forms-starter was found to contain malicious code. Source: ghsa-malware...

MAL-2026-659 Malicious code in atg-atgse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4a895bff954a7aac56b4897d5f8582caded83251256152d5f9b7d55a53eedca The package atg-atgse was found to contain malicious code. Source: ghsa-malware c7041c7bfbb06e2e710b58e8aeff432e4774d756db057975426c046c7ea06339 Any...

Malicious code in dise-pkt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b02da19d128c79fa9465ba506ff8f53abb3ef541a1da253174255be017c9fd97 The package dise-pkt was found to contain malicious code. Source: ghsa-malware 58b8c2811e173e83d76597b5cb08d80de79cbc72396b7ba7957ed6c15a6003a2 Any...

MAL-2026-342 Malicious code in ofjaaah-build-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0f994ed6a23b4449a3ab09537485788c488a90e26c56c52d309b4704d8d2da9 The package ofjaaah-build-tools was found to contain malicious code. Source: ghsa-malware...

MAL-2026-205 Malicious code in rxjs-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a82756fe99cd57d9fc69d12a33d81146a6d0c78b3afa5926fa2531e1b3ced4eb The package rxjs-js was found to contain malicious code. Source: ghsa-malware b3538568871fe17ed55bb2e7a707cf1ca517f047348a754b2be9ec8798ab2997 Any...

Malicious code in svelte-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 822b182580c298051b9c1f8bb1e807bdb6c780fce64845002feebe37eddd0fad The package svelte-monorepo was found to contain malicious code. Source: ghsa-malware 1f5c5e96c4223fbe3046df01f3cda3aa9b821888050b45d82e92688609a7284...

Malicious code in wikibuy-mobile-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e240a0c7b0f1e6f0ce72c097409a543c14de0b3231f000ef7d37c8d61b0e1ad8 The package wikibuy-mobile-analytics was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192588 Malicious code in elf-stats-fuzzy-wreath-278 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de72f83ee4c58e98151bb08bdad43674b0ee28f24618856adaf402b3e2ddbcd9 The package elf-stats-fuzzy-wreath-278 was found to contain malicious code. Source: ghsa-malware...

Malicious code in json-map-source (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dd2d0607d185e9c26b9f948e2335066b6e537f3f192794f59fdf55548300006 The package json-map-source was found to contain malicious code. Source: ghsa-malware 3c10e01cd8946f23f63e8eb210a0de73503e9815cf616aee78f18c96c4fe2ef...

MAL-2025-191473 Malicious code in chai-jsons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e738779b172365174b2a7765325ea0405726a7ce192ddd47025b964d5e134ec The package chai-jsons was found to contain malicious code. Source: ghsa-malware 84b31461976f0984f6a6828d87f0cda7b1e3323084608a91ca02bedcee04357b Any...

MAL-2025-191367 Malicious code in @voiceflow/react-chat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7450440b7c3368ef719fcfa9511d7984fc38ed8b5279f4e49f414f588446915e The package @voiceflow/react-chat was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191390 Malicious code in ceviz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1dfb19a9ba10272dfd3ead68f0cbe940fbaef80738a39e53d44201c3aadc250 The package ceviz was found to contain malicious code. Source: ghsa-malware b6b575b73c5d275b6b6a0f81a03aade8f1e27eabc47214b4a77f300f014b6219 Any...

MAL-2025-191395 Malicious code in eslint-config-kinvey-flex-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2a9878339c2f4bb9dd2871f516aa58a93438018366470f0a023f02178420971 The package eslint-config-kinvey-flex-service was found to contain malicious code. Source: ghsa-malware...

Malicious code in @kvytech/habbit-e2e-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99bc98f56e53ded216f20185150816d9ee319d2e9570684bb920a024c92fae93 The package @kvytech/habbit-e2e-test was found to contain malicious code. Source: ghsa-malware...

Malicious code in schob (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d511d3e995fea577f76f98db2b210a390974c05a620e22e87d9cc9a1afe4f09 The package schob was found to contain malicious code. Source: ghsa-malware 93b65cbaaf5b26ea1a1fd10e632fcfd4403760db53ca856573a70ea1bafedb0f Any...

Malicious code in soneium-acs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47ef13235ddcf50988ca14c257fc3e88969c7a99cd07389710789ef758dba1f7 The package soneium-acs was found to contain malicious code. Source: ghsa-malware 0dd54268e2cc4c0ffd1059655c96c56400b08d5eb44bdf09753b1aec34aac8fa An...