Malicious code in @openclaw-cn/libsignal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85fb1bd455a85140d13ec5cb826c0f8c6164c87a6eeacd72f7fc525440b76f24 The package @openclaw-cn/libsignal was found to contain malicious code. Source: ghsa-malware...

Malicious code in @uipath/ui-widgets-multi-file-upload (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11925b121ae53cf0e735a083521dcd0dbea2b475fedf3ff4e66e4cfac9d7bbec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @uipath/packager-tool-flow (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14153c2050bb9ca128e3cc52251f2321826f0e288b065f37d74b5479a29cf70d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-3561 Malicious code in @uipath/packager-tool-flow (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14153c2050bb9ca128e3cc52251f2321826f0e288b065f37d74b5479a29cf70d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wot-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd781e61a7ca728623c44a900ca22a8cc58de2b93bcd797aeebe453ee6fa4f80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-3588 Malicious code in cmux-agent-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 892743bdf6e4dc3af96fb8fd33e721f63e0984f0132a5728facc785dcc31d919 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-191356 Malicious code in @voiceflow/natural-language-commander (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcffcb39c546d02117506c26844a1fddcedc61f18cd934b27642817c62189437 The package @voiceflow/natural-language-commander was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191352 Malicious code in @voiceflow/google-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dcda26e47493687c0d0abbbc7547b7f3c0e98ae3637f723272bcc4f20152b68 The package @voiceflow/google-types was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191267 Malicious code in @oku-ui/primitives-nuxt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ee73daea7a5697698adf390d5267c68b30e77f888efdbfd38686cdc878deca2 The package @oku-ui/primitives-nuxt was found to contain malicious code. Source: google-open-source-security...

Malicious code in ra-auth-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ddebb70a73861543e5a68b94eb70a9b3e2fa3726a977ef776f8ef3fc75f0e76 The package ra-auth-firebase was found to contain malicious code. Source: ghsa-malware d4c20e629d2ccf83a4cc1a771392c0f879de71df77471d5e822fc511e415cb...

MAL-2025-191181 Malicious code in @alexadark/amadeus-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77dd4490e1bb80e5b23c2e2181146133e356e9a42967ae02883630c49378fb26 The package @alexadark/amadeus-api was found to contain malicious code. Source: ghsa-malware...

Malicious code in @accordproject/concerto-linter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a266ef73fe4cd4e7227a57de2c97b342daf2ae0aed81e06b41bd9a55ab02d24 The package @accordproject/concerto-linter was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191205 Malicious code in @clausehq/flows-step-taskscreateurl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aea06d73112475520b51b21f45ccc22e8ddcf55245e7045f7efcdeefda036595 The package @clausehq/flows-step-taskscreateurl was found to contain malicious code. Source: ghsa-malware...

Malicious code in @clausehq/flows-step-jsontoxml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55490991efb020a37958f1460276c1439d022da66dd47d2799e4e676c1d898a2 The package @clausehq/flows-step-jsontoxml was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191201 Malicious code in @clausehq/flows-step-httprequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 126cc191c92f3dd4eb7a0c64301c3d7e0ff5d999596b4c1b3584e38f130495cc The package @clausehq/flows-step-httprequest was found to contain malicious code. Source: ghsa-malware...

Malicious code in @micado-digital/stadtmarketing-kufstein-external (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b458f23284c11d0533df6f7d474554467329282fb52e761f0a654ef8cf69f3e The package @micado-digital/stadtmarketing-kufstein-external was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191243 Malicious code in @lui-ui/lui-nuxt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeaeb0138ac2e77901a8360aeeeec1038e7da06fabc4c4726a6fb2060f8d01b5 The package @lui-ui/lui-nuxt was found to contain malicious code. Source: ghsa-malware 7914345d453dc4753973e462d6f8e4cbd4d25656c98b9a22f073c9fdddb715...

MAL-2025-191448 Malicious code in vue-browserupdate-nuxt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b54bd42aca6d571419286ebc95bb3a97c702b62db009f3310494e1d4c8ce081 The package vue-browserupdate-nuxt was found to contain malicious code. Source: ghsa-malware...

Malicious code in @ifings/metatron3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a921621636af2528839f2d43e08f7a4c7e22700050cf93eae192678f899ef3 The package @ifings/metatron3 was found to contain malicious code. Source: ghsa-malware...

Malicious code in @hyperlook/telemetry-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc89d8ae1e7f05dd930ed4c9173e00320153c6bb111324358e1c6f43bc07a1db The package @hyperlook/telemetry-sdk was found to contain malicious code. Source: ghsa-malware...