Malicious code in bootstrap-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9ac4913fc1ffcabe1ed6637abc6d532abc014683f48b341ece6127a51da15d8 The package's index.js is heavily obfuscated with classic string-array shuffling patterns e.g., while!! loops with repeated 'shift' calls and...

MAL-2026-3454 Malicious code in @squawk/types (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3774c2374f8e3ab7673400940dfc50d0826239ac34fd2e1170c7ab4c48de6a7 The package @squawk/types was found to contain malicious code. Source: ghsa-malware 14506d7385d737662e11382d460e176a16e727348a5b09cf27325bfbd4566f83...

MAL-2025-48226 Malicious code in redirect-vlgk2c (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18734d591d60ae3710a881e043a5ff1706db08ea32339fa268acf9ca38baa372 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @ui-ux-gang/devextreme-angular-rpk (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e5992d6feea9798115c98d409170302c758e89417f30a1fbef8e51a4b48f9a1 Any computer that has this package installed or running should be considered fully compromised. All...