MAL-2026-3445 Malicious code in @squawk/geo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b40cdbd9c6b1d4f4cfb2769aa09dc2a6c1375426de1eaa166de681740f556cd4 The package @squawk/geo was found to contain malicious code. Source: ghsa-malware ff0e460885b141aab0b22a38b446936439b76287160c78aaad30d7ad4ab22ed9 An...

MAL-2026-3444 Malicious code in @squawk/flightplan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e10ea8e442eceb45822eebfabfb86917c9a166af2490c6e670da321110d04d47 The package @squawk/flightplan was found to contain malicious code. Source: ghsa-malware...

Malicious code in vitetest-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6cbee8ebb202928d2c275d45908d490671a30db31920b98424c756a9a830ee2 The package vitetest-lint was found to contain malicious code. Source: ghsa-malware b3e0378c987c13cbf5c10bec3168e92580b7ed74b69325c32d255e391ba97137...

MAL-2025-48997 Malicious code in eslint-github-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e04576802856f7074d803ef7546dfd6b0e548ceee7429ad5dfe39b153b3e756d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sp-web-utils-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18030241ea8f0cd79b1c6d323dfb7f1de0ede76c967166f73fcf51108f2ecc52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in qr-code-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6749d8eadfe0585d427c6322c10d15c81e3e58171b08a31de2a4abbaddfb9264 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bookingcom-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 797af29edb828b7011355ada91e0e1fab75d5725bf2213d65f47f4c1f407987a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in scm-retail-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d5c9460f2f7b76b7df92b6f3c8f8237b18cac972b6424471eae0ccd9c78963d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8768 Malicious code in gswoer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4711da48a5a6e6e6b240bb1221fc83b074973438dcb6d27b5a6d172b8829f5d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nespresso-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4df4d16cd100a965fef42c58150e9688849a5acfa8de2f809b3ed66f5ef9f29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in d5-es6-sass-boilerplate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3090df994b516cfc30ee58cc5871282f61ebc4e378a73744fb779705e16a1a35 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cirrus-matchmaker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 086ee48f51dc34391e9a296e791f83f5fad1d81e111f0ef00e0691d1f7b313ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...