MAL-2025-191456 Malicious code in @medusajs/analytics-posthog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4bcda5a08e7631f3c8bdbfd1c6a827a23b4a2cadf1ca3ca3a1ae32674df5172 The package @medusajs/analytics-posthog was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191411 Malicious code in quickswap-token-lists (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0934c2b16a82e9886cc6939348bffcb3b75d536fceac933cf1f38bbf9ffdbd05 The package quickswap-token-lists was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191406 Malicious code in quickswap-default-staking-list-address (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 216e8f0cb4005d338ffb7f1646508e511c019af33f18ab70ca61e76a5e923bd4 The package quickswap-default-staking-list-address was found to contain malicious code. Source: ghsa-malware...

Malicious code in @hyperlook/telemetry-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc89d8ae1e7f05dd930ed4c9173e00320153c6bb111324358e1c6f43bc07a1db The package @hyperlook/telemetry-sdk was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191439 Malicious code in unadapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 909f7edee5bdbb572f7a49086e9d07b3de659aba6eec46149d795293e66f6c1e The package unadapter was found to contain malicious code. Source: ghsa-malware 9a3296cbe10427af96d873c98d866b062f727dfdecd5873ed7bf0b5bb501cb40 Any...

MAL-2025-191451 Malicious code in @devx-commerce/plugin-discounts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74de4ea6b81994c916a9fecaea82b1fa9c5a8bf24ad75dc6c755122b821ec169 The package @devx-commerce/plugin-discounts was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191327 Malicious code in @trpc-rate-limiter/cloudflare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f7b0945d5b218d0b4e212ee38448f7de192939870c55e4ef4edb17bfc318d01 The package @trpc-rate-limiter/cloudflare was found to contain malicious code. Source: ghsa-malware...

Malicious code in @sameepsi/sor2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c5470b040485c9e91f7985d59bd1b1754daed9d80ab9545426cfcf57d627928 The package @sameepsi/sor2 was found to contain malicious code. Source: ghsa-malware 2d34ad4c15350b1f697d541469fe980138a8d60a6abf768fcc4c6365a9d186d6...

Malicious code in @posthog/rrweb-replay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 084c272e547764a91347a8436855b707a75409f57fde2692078e9edf5d9b703b The package @posthog/rrweb-replay was found to contain malicious code. Source: ghsa-malware...

Malicious code in react-favic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d4dec5e8464a990814dd2c35d45401414861dd4b227035ae79998c44b05616 The package react-favic was found to contain malicious code. Source: ghsa-malware 5e2a4037034695d45b3b411d0428a55b22920b26b3d5e73f60ed36e8746e9c42 An...

Malicious code in react-data-to-export (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1955002d61deae12965aabd7f49319a8cd75b916377002d839d153e5fd19d8e6 The package react-data-to-export was found to contain malicious code. Source: ghsa-malware...

Malicious code in @oku-ui/motion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e93c9480f3e0eb944aabc540b3632ec18584ccd90aa5a041c10a5f5b7b2a37a The package @oku-ui/motion was found to contain malicious code. Source: ghsa-malware 8b014f6399b1aca00d79587642fc63ab15d16cb1a2ab7f0bd541da45664d891a...

Malicious code in just-toasty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75e29f21c9b431c05fbc927b36672514aceaf4b5deb5ebfe79245aca026e11db The package just-toasty was found to contain malicious code. Source: ghsa-malware 2b112074d0da578cf13c8d773ea5076de4fdc7c11511d2af1910c9f63ba3783c An...

Malicious code in ids-enterprise-ng (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02ae15f729fa23d65989e0f3873d023de175ecf54bb2b230df46861c246bf7df The package ids-enterprise-ng was found to contain malicious code. Source: ghsa-malware...

Malicious code in better-auth-nuxt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63a2c1f5ccee32dc0e1c83e0664d434add6b894caa54c57f137fe0367cba558f The package better-auth-nuxt was found to contain malicious code. Source: ghsa-malware 14fe0837bf9131779e90c6a1e8530acbe2d811b2df09dfa25d2d86c5a151c0...

Malicious code in csv-tool-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4710ebc34f0c5b28d34c41d165d2fff2c6ea04e90038226c7b328283319dd2a4 The package csv-tool-cli was found to contain malicious code. Source: ghsa-malware 7a82657ae868943eebe70053efe5b50087b24ce2a81a2c5eccca35dcb483a1f2 A...

Malicious code in bytes-to-x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d19001ff544a780ecb8d28a32f64cdd826bdeeef576c1350b61b5c699d30029 The package bytes-to-x was found to contain malicious code. Source: ghsa-malware 0c7ce92280ddc3448a5bcc7c44e7807c8e4b4226449cc6de80708d7d48b7970e Any...

Malicious code in benmostyn-frame-print (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f0d4b7abe9ddc156e7aa8fd6441240100d81edbc79ad8d29691b1a7f82ab32 The package benmostyn-frame-print was found to contain malicious code. Source: ghsa-malware...

Malicious code in ngx-useful-swiper-prosenjit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 285834c76af1324a80d9544c32d23970dce50b43ab7fb2d3ada984f7537ff5d2 The package ngx-useful-swiper-prosenjit was found to contain malicious code. Source: ghsa-malware...

Malicious code in react-jam-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 369fe7c56e5f271a31e023cbe36323fc11043fc4747d0309c5c48aaa1eedf822 The package react-jam-icons was found to contain malicious code. Source: ghsa-malware 1c50426946a6dd92cf360d347aa3ed8f15988f3655c7721aff8dd0b8ff8e946...