Malicious code in @silgi/drizzle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c2e7d01c383c77ebeddc3e05fac0d15335e412587dc2581a75f3406fdbf8fa The package @silgi/drizzle was found to contain malicious code. Source: ghsa-malware e8e9c9c9355daf84cb6c98baa093fe99abde3b51f58854ac5d4934752d55a9a3...

MAL-2025-191119 Malicious code in kinvey-flex-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2db8900040473f66489c468a226e662892ffd1324837d5096c33e16fc43bdd7a The package kinvey-flex-scripts was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191117 Malicious code in kinetix-default-token-list (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 834c5a1d0acc5be073a1939708bfdfdb3d38a411407c9ac4e2abebdfd44ee059 The package kinetix-default-token-list was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191087 Malicious code in esbuild-plugin-brotli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3297dd1fa55908191d232d7ae6e086066d65d1676c5e1d50b624a84ba1083a11 The package esbuild-plugin-brotli was found to contain malicious code. Source: ghsa-malware...

Malicious code in @lessondesk/api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c812dd964064f404443160aac0a9fddb5dccef95ecfb131a074fcf7176bd49f The package @lessondesk/api-client was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191080 Malicious code in bytes-to-x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d19001ff544a780ecb8d28a32f64cdd826bdeeef576c1350b61b5c699d30029 The package bytes-to-x was found to contain malicious code. Source: ghsa-malware 0c7ce92280ddc3448a5bcc7c44e7807c8e4b4226449cc6de80708d7d48b7970e Any...

Malicious code in automation_model (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1926379efdd9fddb153965f44070e510b81ea958a611dc7b2fafb891b856f35c The package automationmodel was found to contain malicious code. Source: ghsa-malware b6b4ab86b995aa30207899784d17feba68bd397866ebb733d0de222eeb2a4c1...

Malicious code in @varsityvibe/validation-schemas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbd2bb2effb1b3935deef38346c305be9651765d2e15c4256943b343b2a3c6f3 The package @varsityvibe/validation-schemas was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191113 Malicious code in jquery-bindings (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31127dd6191c9d3e68e94d705b43d24066f06f37b41f659a5a6831a8a811fc11 The package jquery-bindings was found to contain malicious code. Source: ghsa-malware eb6c4671167bd91b31b632f661a4bc8a3d627412796b9899fae3d0797eb51e3...

Malicious code in react-keycloak-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cf006e02e42a934dd475393f106cc2cb39abb0f8438ee1a09d63d50649221c7 The package react-keycloak-context was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191005 Malicious code in react-native-view-finder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05a61e7a0f7e8f74f89c9dddee6548199270ab45dd47056248e1467bfecca1e4 The package react-native-view-finder was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190985 Malicious code in pdf-annotation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30a9825714dd4a01b7deb1226158bce68ad4456f16230aed225cb7240d7c4344 The package pdf-annotation was found to contain malicious code. Source: ghsa-malware 955e80d981658c3ea77d6ae52df04c36931e4d9403d1a44976b8222b2aa9c4f4...

MAL-2025-190960 Malicious code in eslint-config-nitpicky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 574a6235abe523aed3a5411fc8472635c6c8d455b973bcb79f3424effe0fd99b The package eslint-config-nitpicky was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190956 Malicious code in docusaurus-plugin-vanilla-extract (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2659e389b89fcdf1fe723b544962764d4f2881cae9694dc4107fbbb4ec077328 The package docusaurus-plugin-vanilla-extract was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191008 Malicious code in sa-company-registration-number-regex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f15485422c9807206afeb3c43ed1e03d2f2499b0c689d8bf253e663cf72d7fa7 The package sa-company-registration-number-regex was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190942 Malicious code in valid-south-african-id (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a363caeeaaa83a715f0d38b64608e11a39a272a42abe53c92dbbacb133dc927 The package valid-south-african-id was found to contain malicious code. Source: ghsa-malware...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

MAL-2025-190935 Malicious code in @ensdomains/op-resolver-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6def95ef69b4dd7da38ca7a697fb0eabff2ae2fe2eff4f31957254a207346bd0 The package @ensdomains/op-resolver-contracts was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190881 Malicious code in @posthog/gitub-star-sync-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4be422ec924addbeb23c34a8b3305835feb3d665ab57afdc1450734d0b10f5a4 The package @posthog/gitub-star-sync-plugin was found to contain malicious code. Source: google-open-source-security...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...