Malicious code in date-fns-formatter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9839e9520db45a2a739a415767a8258e15afee65cee71fe5ff41777cbd22450 The package impersonates the popular date-fns library. Its main module, date-fns-formatter.js, contains a small formatDate shim as a decoy in front o...

MAL-2026-15969 Malicious code in array-frames (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd9461945c1bccc858c52f79e13624b33fb8cdfc37c889de48907b8464779063 The npm package [email protected] advertises a trivial array chunking utility but ships an obfuscator.io-wrapped payload as its main module. On...

Malicious code in array-frames (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd9461945c1bccc858c52f79e13624b33fb8cdfc37c889de48907b8464779063 The npm package [email protected] advertises a trivial array chunking utility but ships an obfuscator.io-wrapped payload as its main module. On...

Malicious code in node-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e7475543fb41397ba49574f9b16340e671160b13bb100bb0db6c4acc2fb154e The package impersonates the legitimate blakeembrey/node-helper library matching author metadata, README, MIT license, and top-of-file helper functio...

MAL-2026-15997 Malicious code in node-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e7475543fb41397ba49574f9b16340e671160b13bb100bb0db6c4acc2fb154e The package impersonates the legitimate blakeembrey/node-helper library matching author metadata, README, MIT license, and top-of-file helper functio...

Malicious code in jwt-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b56e3f2d5fab071637ba7688de6c2a9c3d1c1846b6ec939b82eb2c8e9ff03956 The package is published as a trivial JWT logging helper but its main module jwt-logger.js is a heavily obfuscated string-array dropper. On require, ...

MAL-2026-15970 Malicious code in array-scala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78c71ee306356b5d27d673ae95bba2a24093aeac12e43044bd2503aa8c3d9024 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in array-scala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78c71ee306356b5d27d673ae95bba2a24093aeac12e43044bd2503aa8c3d9024 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

GHSA-P498-V437-472G vulnerabilities

Vulnerabilities for packages: langfuse, vitess, tileserver-gl...

GHSA-PX8P-9VWX-VF98 vulnerabilities

Vulnerabilities for packages: langfuse, tileserver-gl...

GHSA-6GMQ-8VP8-GCM6 vulnerabilities

Vulnerabilities for packages: sqlpad...

GHSA-4MVJ-M6J5-PMF7 vulnerabilities

Vulnerabilities for packages: nemo, open-webui...

Malicious code in trongridew (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 598687794d8452d6845a3529e26bf63838cedee736dc0b8545ad33abe2e827f3 The package exposes a single public function permprivatekey in main.py that unconditionally POSTs the caller-supplied Tron private key as JSON to the...

Malicious code in @domyjs/reactive (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c86a74d6abacb40b6cb20058f59cddbd922321b2d60793106da7c6cecf32055f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15956 Malicious code in @domyjs/throttle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99fe66f1096277c1fc4cfea3b2965e728cc128aad9cd21a571b1a5b8dac45c6c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @domyjs/router (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6506d9bb7ba386d56ee4e9f326482fd887e63e1b7ebe674f8df34c8c75cf1b1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @domyjs/mask (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95227ac866633c8dbcb549843c31a2e58dad0d69474e065b8ec7f09fbf9bfe71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @domyjs/throttle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99fe66f1096277c1fc4cfea3b2965e728cc128aad9cd21a571b1a5b8dac45c6c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15951 Malicious code in @domyjs/i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09d7898515b6bfb8ec32fadbbdb3ae21e3550dcdc0980d21d3ee909bf147bf38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15987 Malicious code in infinity-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 120919aeccbb43dad4717538757f11dcea999b371dc507b10395b6369fd85f46 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...