MAL-2025-190860 Malicious code in test-foundry-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9961bd7169c780d2201b29f4ada6a92f1c9d6eb26c8443c0365a7ea218daa7c8 The package test-foundry-app was found to contain malicious code. Source: ghsa-malware 9b0d08ebcb8c6a236f7c4c5785ac4f1ec1b4e2ede40366d6fc439473f946b3...

Malicious code in medusa-plugin-product-reviews-kvy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d400830b8f3bd9546ee8f7f68bfb8028db23280c0f6a1c4f494e4eebf65df6f The package medusa-plugin-product-reviews-kvy was found to contain malicious code. Source: ghsa-malware...

Malicious code in dotnet-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09b8736e74e763b930253cc92ff8ee4e0b0c323b712ea201cd40c8590f618b72 The package dotnet-template was found to contain malicious code. Source: ghsa-malware 01d263352d7df50818b3c0bfb8c2c2b4c30e78dcf1feadeb4b808c2636b9c6a...

Malicious code in @ensdomains/blacklist (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 885b443e4475d3f0306ce0899d0afd3b9190193bac49fa411c41328695e05a46 The package @ensdomains/blacklist was found to contain malicious code. Source: ghsa-malware...

Malicious code in @ensdomains/ccip-read-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f7c2d429d8a938e077f0a3c6d29aa4d7880c8ceabd54c6d63411a6db8b08bef The package @ensdomains/ccip-read-router was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190739 Malicious code in @ensdomains/thorin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b9c01ec760c3b86219974f606ccd10c9b872a38f725916392971a20b50e4b57 The package @ensdomains/thorin was found to contain malicious code. Source: ghsa-malware...

Malicious code in @posthog/plugin-contrib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afcd017c0dad0f7c8771c40b6fbc9308cf19b77a704f62856696156fb3cf156b The package @posthog/plugin-contrib was found to contain malicious code. Source: ghsa-malware...

Malicious code in zuper-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df939c793cc77c055c399930ea5b042f3873bf3e852d94c4c4fcd9388135f0b7 The package zuper-cli was found to contain malicious code. Source: ghsa-malware 303dadde5b88a63ca4d3dd7ef7a5c163dd833cd9505ac628409138e7b4a73401 Any...

Malicious code in skills-use (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f974e3dc3206af78c8a6fd5370b73dc14d8edc1f052caa4992fdca5c5bac45ac The package skills-use was found to contain malicious code. Source: ghsa-malware 25e55ca30592985c5f31158f8bd68d19643e2b48db1cf4578a7da6ae380ed661 Any...

Malicious code in @posthog/rrweb-record (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19ff125dfd13ba489699b36ca14acbab8e87eda739d43d9a31ef2a3a59903398 The package @posthog/rrweb-record was found to contain malicious code. Source: ghsa-malware...

Malicious code in eslint-config-zeallat-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b28fe7c28614bd60fe323d92db35df502ed3c1c9076a708815031e1a78311c6e The package eslint-config-zeallat-base was found to contain malicious code. Source: ghsa-malware...

Malicious code in iron-shield-miniapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a7b0e4007bb817da7fd19c6ddd7f073f585337504d8ac60541b07e162398b70 The package iron-shield-miniapp was found to contain malicious code. Source: ghsa-malware...

Malicious code in @seung-ju/next (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5861551f803b13038f4794b2deef775059eadcd068c47515bb716ee211e111cc The package @seung-ju/next was found to contain malicious code. Source: ghsa-malware 99798d918b493ce5ca07d2bda2360901854e0e714663247cd7bc3d0bd60837ed...

Malicious code in @actbase/react-native-tiktok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e30674f65fae1c8cebcf4d015086a943502402cc93f3559653c406c592a62366 The package @actbase/react-native-tiktok was found to contain malicious code. Source: ghsa-malware...

Malicious code in @actbase/react-native-naver-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b3259789ec3c0e90767b9f76d1f7d825f89fba1d5810692ec87ae4567f698e The package @actbase/react-native-naver-login was found to contain malicious code. Source: ghsa-malware...

Malicious code in @zapier/browserslist-config-zapier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5146756159d44339572781661307fc36bb08adb636158ee54628f774506ae47 The package @zapier/browserslist-config-zapier was found to contain malicious code. Source: ghsa-malware...

Malicious code in @posthog/nuxt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 935dd114e6907af472225a5c7fb27bf9f36b83117c1e6355228de6b837a124e2 The package @posthog/nuxt was found to contain malicious code. Source: ghsa-malware e475b17da9cc625eb62906d0f93266f2657035bdf465eda5eb2a958fbbd45357...

Malicious code in @asyncapi/web-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd2dff5164da9cab0fa9cbd6684d231b19caa4cc57fe660f4d0ad2cd8573dc1a The package @asyncapi/web-component was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190727 Malicious code in @ensdomains/dnsprovejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cba062a1b19731497546d926af22ae0964962df93fc3bd059d0e66df0fd41521 The package @ensdomains/dnsprovejs was found to contain malicious code. Source: ghsa-malware...

Malicious code in @ensdomains/ccip-read-worker-viem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57b104a492d5893772494de67a98f0114e695a8d24e0444d12d0963029fc4b32 The package @ensdomains/ccip-read-worker-viem was found to contain malicious code. Source: ghsa-malware...