MAL-2026-346 Malicious code in zod-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8d6e0134575d22df9c8acb633e41aeb44e167203581cee75c81264667e9bdee The package zod-js was found to contain malicious code. Source: ghsa-malware df349fd5990c0cb74fcaa574f32fd30796c00bbe619ee60bd0eac1a658c7dd49 Any...

Malicious code in simple-string-utils3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13d9f9db863d718f528caa234dfa722b2631eb76195f504f47670898aeb0634a The package simple-string-utils3 was found to contain malicious code. Source: ghsa-malware...

Malicious code in dotenv-intended (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 321eaa257985bd47bbf31b2f7ccdaef2df5b424b7b257400a48140ef6029e670 The package dotenv-intended was found to contain malicious code. Source: ghsa-malware df2195d5589f3e44d82053db7cd9ae186dfd168b35c9db8f97baa29f0c63612...

Malicious code in rt-live-hero (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b963cc4f9c61717fb440dbd17f3897337fd7aa94a3d077bcd8307c2faf109c57 The package rt-live-hero was found to contain malicious code. Source: ghsa-malware f56b0f0c83fe7af0849099067abaa56333d2eadffeb3f8152244c74b40a706d6 A...

Malicious code in syqara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62fd7bca2ef5e78bc040138dfaac5d1c63a4efb820747b58406db43b6965a681 The package syqara was found to contain malicious code. Source: ghsa-malware 247c2c1d35e2e74ea2a025de37858894366c24053f4ff7517f2204ded2b20344 Any...

MAL-2026-85 Malicious code in elastic-docs-v3-utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc3812db2733b6d6bfaba2e5b7b08065e1b07291a2a58a6dfa589b31added3e6 The package elastic-docs-v3-utilities was found to contain malicious code. Source: ghsa-malware...

MAL-2026-68 Malicious code in n8n-nodes-performance-metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector decf8fbf4cfd483a5fc72a3c3037f88de636f0732e3d591a09309e54faceff05 The package n8n-nodes-performance-metrics was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192999 Malicious code in @vietmoney/react-native-smart-page (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7789664c2f8f3999c2d9294a538cac5a4ae536b37159d9246a6aa2ac4e2c0b3f The package @vietmoney/react-native-smart-page was found to contain malicious code. Source: ghsa-malware...

Malicious code in yt-smm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3641ecf42237a55c9fb81c4368aa7b83a42d2110a64a733f45d27005cf38dc26 The package yt-smm was found to contain malicious code. Source: ghsa-malware b4d96978cd4e109ed8b360f551af24fd1621dd659f63a490c9de077b587f607b Any...

Malicious code in test-mal-npm-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f6f3e205b514fc5d9c6e98be4d3b0bf7049c38a0ff62e678584aaff50fc643 The package test-mal-npm-pkg was found to contain malicious code. Source: ghsa-malware d97b7f5012899a502ba9d154bc5f146717e56795f702823294ea3636b433c7...

Malicious code in tailwind-color-shine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a354c1527256b0cbb0309429b90ad036ded6b2cc1b2d29b8f2809af26f718cf7 The package tailwind-color-shine was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192614 Malicious code in react-enhanced-glow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d6a21a6e0e2094ca1f9327d83a0c38da77bd3b8f8ffbad317ef4530a7d14c45 The package react-enhanced-glow was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192576 Malicious code in sd-security (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 429e5a82bf0260fda2c531fb7909cf8b8417e424119df889ee7bad0ca4b439c2 The package sd-security was found to contain malicious code. Source: ghsa-malware e295e65302840407a5f64ae51ff2616121573aa518cd29d40198edf692c604de An...

Malicious code in cyber-fca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b577f3dcb8f7ebe36e69f65a8b605a23ff2dbdb7d896e78bc20f1880331a238c The package cyber-fca was found to contain malicious code. Source: ghsa-malware c7c387785610633bef06443bfd2ecd4a274d3d1265e22822b04579fae216ba2c Any...

MAL-2025-191110 Malicious code in inmaa-map (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14a71a1334fb3a18076752ed1d28b6fa7cc43dc4f4b612d102624e00dcdf53cb The package inmaa-map was found to contain malicious code. Source: ghsa-malware 56eac0e53cd10844280484abbd6456539bce6cd1e970a33a3707d49612ac8a88 Any...

Malicious code in bidirectional-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9232b33b143ce14e500ddb0d725a5b646a180ad4bd7dbf1fc8890baefdd22f95 The package bidirectional-adapter was found to contain malicious code. Source: ghsa-malware...

Malicious code in @quick-start-soft/quick-document-translator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4837747658fccdc13c30d5359ffe43e237536140e50412ba0126afa5d6d8e301 The package @quick-start-soft/quick-document-translator was found to contain malicious code. Source: ghsa-malware...

Malicious code in devstart-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f231d9b0651ac7f2fb06d9936228b85a858023ac4f8b505f6bcf63ac5d661a5 The package devstart-cli was found to contain malicious code. Source: ghsa-malware 54539cce13f7aae0398b444bd30638c4e74ef9546c180e0bfb778aa00be08a30 A...

MAL-2025-190512 Malicious code in bcryptkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a480449fe3e91f066e60e8f4ed7d4c85e6915b3c9b2712769c54eac67eefa452 The package bcryptkit was found to contain malicious code. Source: ghsa-malware fabc375d7ac31af2156e2d4ecf33d4e87df80d7b95873af883a10d9c35dfabb9 Any...

Malicious code in chai-as-sorted (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b0a3502254657767ec819133929d33c2b84f1d9607acc89e9557de2b80e9bed The package chai-as-sorted was found to contain malicious code. Source: ghsa-malware 0a769064bb46785af26b5ee4af98633de26f88bcad7b199c113bdf52940e195a...