Malicious code in @apple-pay-trust/finish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9abd2d210c4a5df0e95f326e80b2e6618647c03ba4158e1d6ffbd36d9f7b800a The package @apple-pay-trust/finish was found to contain malicious code. Source: ghsa-malware...

MAL-2025-42486 Malicious code in @eooce/sbx (npm)

The package @eooce/sbx was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c3f68a08af76f3c5412daa2b25a618ab31f5541ee496dec1392afedcf86ec33 The OpenSSF Package Analysis project identified '@eooce/sbx' @ 2.0.7 npm as maliciou...

Malicious code in lyft-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 191527fd54bb2116b8405e7655ca0fa98138ea2f8f4463ca288460aeb3d1caf9 The OpenSSF Package Analysis project identified 'lyft-internal' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...