Malicious code in nanoreset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d98d973ab73f5753f101bf681c2916dd61b81ae036a3519f76e17321ba9e2ef The package nanoreset was found to contain malicious code. Source: ghsa-malware fc12f8a503d7dbf0bae6b335d8ea61ae3e1c8e6ec42e415cc48b4ab536180c8e Any...

Malicious code in react-native-email (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685a2ceb0fc4b3de8462a07c55626285d47bbb72612a7feac2582a7dbfc2a606 The package react-native-email was found to contain malicious code. Source: ghsa-malware...

Malicious code in @posthog/clickhouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab67710c7cf24d338618be2ab087d4c3b27117879492e29334b31cd0328e171a The package @posthog/clickhouse was found to contain malicious code. Source: ghsa-malware...

Malicious code in react-native-view-finder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05a61e7a0f7e8f74f89c9dddee6548199270ab45dd47056248e1467bfecca1e4 The package react-native-view-finder was found to contain malicious code. Source: ghsa-malware...

Malicious code in react-qr-image (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0000767e8d42376cf8a198fa59803da5acb13d0317314fcb57902d5d373f035 The package react-qr-image was found to contain malicious code. Source: ghsa-malware 72459a160e75d16a5a10d9805d6c558aabb61428411359b97050ebf70be1270f...

Malicious code in pdf-annotation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30a9825714dd4a01b7deb1226158bce68ad4456f16230aed225cb7240d7c4344 The package pdf-annotation was found to contain malicious code. Source: ghsa-malware 955e80d981658c3ea77d6ae52df04c36931e4d9403d1a44976b8222b2aa9c4f4...

Malicious code in orchestrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 732fc5c54ff5b647980dececa3d55359ca48b380f00beb4845ddfbcc9c968af4 The package orchestrix was found to contain malicious code. Source: ghsa-malware 68b12d5467e82141efec319259cd3c7331cd739fef7932534ebdf9692980ab74 Any...

Malicious code in eslint-config-nitpicky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 574a6235abe523aed3a5411fc8472635c6c8d455b973bcb79f3424effe0fd99b The package eslint-config-nitpicky was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190948 Malicious code in coinmarketcap-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cf4ed85361338b02dab2cd93a7a4b750f9831838300ce645886aa8e5ef0fb48 The package coinmarketcap-api was found to contain malicious code. Source: ghsa-malware...

Malicious code in template-micro-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a11182cb9c66d55101737e1db16a1baf528ddd4f3a498c74acfc75da64fd92b5 The package template-micro-service was found to contain malicious code. Source: ghsa-malware...

Malicious code in tiaan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eec9aed3f08840a4f5787d8e5edb18c097459657ba29ca488daae2047709701 The package tiaan was found to contain malicious code. Source: ghsa-malware 0135c9cc2fe2d3112342fbb4e91dee9f30647a8d8bc93c0453991d8c51f4710e Any...

MAL-2025-190934 Malicious code in @ensdomains/ensjs-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f73575f4b186fbdf20e0a27b2bd9e1fae8839ea9f17e4648c96e6d4bf4f96da The package @ensdomains/ensjs-react was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190929 Malicious code in @ensdomains/ccip-read-cf-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd3f5e0ef4b518b71e371b472de64525c90fa98305becf54d8e15279e4d5d766 The package @ensdomains/ccip-read-cf-worker was found to contain malicious code. Source: ghsa-malware...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

MAL-2025-190815 Malicious code in @ensdomains/web3modal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0de2afae3cc53842a9517b3463d4a07b3945667241988137bdc9598a49b189ab The package @ensdomains/web3modal was found to contain malicious code. Source: ghsa-malware...

Malicious code in capacitor-plugin-purchase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ff438ebca922d9d6cb6a8a96700003065dbfc0ed65a5984edec2d5f5d37751 The package capacitor-plugin-purchase was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190836 Malicious code in capacitor-plugin-purchase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ff438ebca922d9d6cb6a8a96700003065dbfc0ed65a5984edec2d5f5d37751 The package capacitor-plugin-purchase was found to contain malicious code. Source: ghsa-malware...

Malicious code in @ensdomains/react-ens-address (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c136b64e27be18d7c3aeebbcd6a31479adacc70efae5bbf586009180e51098a The package @ensdomains/react-ens-address was found to contain malicious code. Source: ghsa-malware...

Malicious code in @actbase/react-native-kakao-channel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65c6154361619c2c8153e5a3035c559aafef406bd969d3178a240e0ed19d0a9a The package @actbase/react-native-kakao-channel was found to contain malicious code. Source: ghsa-malware...

Malicious code in @asyncapi/dotnet-rabbitmq-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cfe9dec1956338f8f71d62c068f6d7ce424424780d8775218b884d49b8ac838 The package @asyncapi/dotnet-rabbitmq-template was found to contain malicious code. Source: ghsa-malware...