MAL-2025-191115 Malicious code in just-toasty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75e29f21c9b431c05fbc927b36672514aceaf4b5deb5ebfe79245aca026e11db The package just-toasty was found to contain malicious code. Source: ghsa-malware 2b112074d0da578cf13c8d773ea5076de4fdc7c11511d2af1910c9f63ba3783c An...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

MAL-2025-190825 Malicious code in @strapbuild/react-native-date-time-picker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5a0237f0f0916f69a132f28afefe58f6c681c43c8dd6d3ca62ae2a3c2d6af45 The package @strapbuild/react-native-date-time-picker was found to contain malicious code. Source: ghsa-malware...