309 matches found
MAL-2025-190800 Malicious code in @asyncapi/php-template (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81619d0ddfa1696b71c550ba94be4ddbdaed53aaef37376f8024945422da51b5 The package @asyncapi/php-template was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190841 Malicious code in evm-checkcode-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67c49d35b6096e7c647d830c11a75a90f1bd3b90677f1c72d1bdefcd87b134e8 The package evm-checkcode-cli was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190829 Malicious code in @trigo/hapi-auth-signedlink (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bed6824ae90bafaade2c426612b295defed6107b61296445aa2d1d728729c23b The package @trigo/hapi-auth-signedlink was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190814 Malicious code in @ensdomains/unruggable-gateways (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19161096da8bc9f3514ff35b262f9d1f1683b0f54a01041afb0993d5d5268f9e The package @ensdomains/unruggable-gateways was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190861 Malicious code in zapier-scripts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ba8a867b632a8d6da937fdbfc075adef06017c7ab8a6b17924da7ac6d13470 The package zapier-scripts was found to contain malicious code. Source: ghsa-malware a7ff5378c64d4e7f1b2a7f36f2ed69279219f697dd2cff8098a4de7e70f34ff0...
MAL-2025-190808 Malicious code in @ensdomains/offchain-resolver-contracts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e33729ef15689f97d628745ade2c8c9a5f42b14ff63f1f151416c9db5732c88 The package @ensdomains/offchain-resolver-contracts was found to contain malicious code. Source: ghsa-malware...
Malicious code in @asyncapi/python-paho-template (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b7e91afb25619c373d083857f06f65945216536aa6308326de63dd33458f72c The package @asyncapi/python-paho-template was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190713 Malicious code in @aryanhussain/my-angular-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db21c30964586d84965ff2e4fd343156117c9f05c9ad2cfe6b1705d802862e13 The package @aryanhussain/my-angular-lib was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190771 Malicious code in esbuild-plugin-httpfile (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efc9c8640b4324e3d5e06e51fa01e3029117ab9121c0baa55b1f81b1b73019a8 The package esbuild-plugin-httpfile was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190733 Malicious code in @ensdomains/hardhat-chai-matchers-viem (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1999f51becf9c74a78a05fda5c53906b196ac72e115d0555b88ff2dc855adca5 The package @ensdomains/hardhat-chai-matchers-viem was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190723 Malicious code in @ensdomains/ccip-read-dns-gateway (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ddc155befe014da7ce46a7c122655187ecfb495a9af39726b73de5be9ad4f8c The package @ensdomains/ccip-read-dns-gateway was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190668 Malicious code in @orbitgtbelgium/mapbox-gl-draw-scale-rotate-mode (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e4c029f895b6e2e59e54d01b72927b97daa87a560816829220a1b62775221ae The package @orbitgtbelgium/mapbox-gl-draw-scale-rotate-mode was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190681 Malicious code in @trigo/atrix-postgres (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e14a54095c9b7bc146d414230ec3c364d9dfb381dd4554ec3003ac116e69824 The package @trigo/atrix-postgres was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190683 Malicious code in @trigo/bool-expressions (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6798c49edd52f5db8414de6ec11538d35d915051f5d69bb07863965971915e57 The package @trigo/bool-expressions was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190684 Malicious code in @trigo/eslint-config-trigo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f323ad76d021234c96924ded9095572d18be962e0c71fb9cfbeb1fa43079e961 The package @trigo/eslint-config-trigo was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190686 Malicious code in @trigo/jsdt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff5aae2e5762514a4d2a304a2ceb36d9b895c8bd88c9a6303752aea4b078119f The package @trigo/jsdt was found to contain malicious code. Source: ghsa-malware 91f1b0ba55c42b887eade435580838bef529a7fe7a9b9fd8b3cd05ada0528cc7 An...
MAL-2025-190657 Malicious code in @asyncapi/generator-helpers (npm)
@asyncapi/generator-helpers version 1.1.1 was published as part of the "Miasma RAT" software supply-chain attack campaign identifier "miasma-train-p1" that compromised several widely used @asyncapi npm packages on 2026-07-14. The malicious code was injected using whitespace hiding: it is appended...
MAL-2025-190656 Malicious code in @asyncapi/generator-components (npm)
@asyncapi/generator-components version 0.7.1 was published as part of the "Miasma RAT" software supply-chain attack campaign identifier "miasma-train-p1" that compromised several widely used @asyncapi npm packages on 2026-07-14. The malicious code was injected using whitespace hiding: it is...
MAL-2025-190645 Malicious code in @posthog/core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92317c7f15a5eade85fe5c248b9b31870be1b384a5e5455dd3ea546c94c279e4 The package @posthog/core was found to contain malicious code. Source: ghsa-malware 8fce4f3a908b835a108ad8c30d1f2095f67e065911b353c73d0f9151be9ed6bf...
