Malicious code in react-markdown-canvas (npm)

Malicious package due to data exfiltration via Discord webhook on install. Collects IP, hostname, and date without consent. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4123db6526d8c37f99fa33e2524edc97922efef6b1605dc0a8acdbf41e76cc77 The package...

MAL-2026-994 Malicious code in vl-ui-code-preview (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5abf0716d5a814e3cd0ca1da245819d81f5238adb1911513d88b36825c7a99be The package vl-ui-code-preview was found to contain malicious code. Source: ossf-package-analysis...

MAL-2026-943 Malicious code in ethereums-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bddbe5ea052b93fa04966b01c8302455e06311fd6015aaf9c76c07ba8c8f21c4 The package ethereums-lint was found to contain malicious code. Source: ghsa-malware 7671a5fea1c5f2b0118bd9981213bde2b546a4191a57acd041aed6d8560c0de6...

MAL-2026-607 Malicious code in banquet-runtime-modules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 236dee5bac395a6446685322fb3dadb454e4b7f7d43a132111a8392721fed206 The package banquet-runtime-modules was found to contain malicious code. Source: ghsa-malware...

MAL-2026-168 Malicious code in @zuora-marketing/linting (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddcfd1151af868e694a4a79307ce1284331ad88b8ff631651f3fd2c47fbf342a The package @zuora-marketing/linting was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in intl-tel-input-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffcf244ee511453d176367146c8b6b5ee74d18e3037210dd63d19712c8647991 The package intl-tel-input-utils was found to contain malicious code. Source: ghsa-malware...

Malicious code in ugc-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffd0991cb1cc7098930838b404210022aa2667d78f2884417f449d85e90fb12 The package ugc-kit was found to contain malicious code. Source: ghsa-malware 4e44ecda4e96910709480e50046146e482992e36fb2e8429211e1f653376d123 Any...

MAL-2025-192543 Malicious code in mw-proto-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9caaea5d17e80497fb4bce0a5b6ce695c9f917c1fee32da71e8ddaa324b79c2 The package mw-proto-ts was found to contain malicious code. Source: ghsa-malware c668f66eb7f8b165c5db43b6acfc4786387faedad258459906266866c843a4ed An...

Malicious code in elf-stats-sleighing-mailbag-621 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3bd43889e90656b7e076b57eae6373547a6c883fda60fd63069784433a41bab The package elf-stats-sleighing-mailbag-621 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in elf-stats-snowdusted-stockpile-595 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 313c3813ac8880b0dc1f1a973c0125bf17d9f2c700ddc7a009cfc1efbdb54f4b The package elf-stats-snowdusted-stockpile-595 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192203 Malicious code in elf-stats-cocoa-ribbon-476 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 005ed1613dc4777b86a0449d32f014ea40f1ab9237ebd84bed9d955cdbaefd56 The package elf-stats-cocoa-ribbon-476 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in br2s-ui-componentlibrary_r2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be6786b979a9a6378e096381748fc3546c761e95cf2631585010ca066ad5ef19 The package br2s-ui-componentlibraryr2 was found to contain malicious code. Source: ghsa-malware...

Malicious code in wishlist_dropdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96af5d4cffbd1a2bb13ecd403b9acf5e0fe62f6df151c6b511f556c9c0a11c31 The package wishlistdropdown was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190574 Malicious code in kc-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32088d023faff39ca532f60b6fefa143e98da4ff439ecf1d9922cbb7f5f669ef The package kc-next was found to contain malicious code. Source: ghsa-malware 750f8ce90382db0d1c42cc21bef3cce0f5220048311c62bff8fb2928e2b936c6 Any...

Malicious code in warnermedia-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 235c7d43006e41c31c3b06069239c483934cee515a1f489c55e698fdf994909e The OpenSSF Package Analysis project identified 'warnermedia-test' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in mbed-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e37cade9ed9f558086d52e3d4d53a6892f73d271c38ea94d5c0dd25d2a2eee32 The package mbed-js was found to contain malicious code. Source: ossf-package-analysis 09a05d2a84ef02b428f1176efd59cabf7a0b1c55bf4b0d8a2ac97c681ada2d...

MAL-2025-48558 Malicious code in demo-mercadopago-mcp-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a777ccccffbf142e34b0081be4681c4ffcb72aa584b99d15bfd58878e6085881 The OpenSSF Package Analysis project identified 'demo-mercadopago-mcp-server' @ 99.0.3 npm as malicious. It is considered malicious because: - T...

Malicious code in file-dependency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis db9d9ac2b90c17d04ff56afe81a886e99665eb55048e7cc7c9a3f0b1855db828 The OpenSSF Package Analysis project identified 'file-dependency' @ 7.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2025-46916 Malicious code in monolith-twirp-registrymetadata-core (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fed8651ee33f0218f88e2e10804dc473d63a11e5d66451c60f52af66a99dae29 Source: ossf-package-analysis 9126904a0142c25fc3bffb7bb0d13eb5497f64bd39d2006b73cd1b6376fe2544 The OpenSSF Package Analysis project identified...

MAL-2025-46906 Malicious code in egress (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58b66aac2f065f544a96fcec2e9a2a0a03b4163a1684af01f38fdd618be31c7c Source: ossf-package-analysis ee02802f5d94f135856b832109948906e7a3a39fbea753561a4d518a1d4e889f The OpenSSF Package Analysis project identified 'egress' @...