MAL-2026-2906 Malicious code in swplayer-react-sl (npm)

swplayer-react-sl is a malicious npm package that when imported downloads a C2 dropper from https://coingecko-liard.vercel.app and executes it. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb25be00997a0e21d0d5337b89729fe6c3a99c9364f8a46d4b2e2a828e845f54 The...

MAL-2025-13767 Malicious code in @zalastax/nolb-react-sl (npm)

The package @zalastax/nolb-react-sl was found to contain malicious code...

Malicious code in @zalastax/nolb-react-sl (npm)

The package @zalastax/nolb-react-sl was found to contain malicious code...