Malicious code in hw-app-eth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b26da97535a707e0e93acd8bc34d6e7ad13756f38c37d34b362a36d4dbdef24a The package hw-app-eth was found to contain malicious code. Source: ghsa-malware 2f92f05cefb6ff5250762470390af00c1d4ccaf51b04cf8f1c15ab1721573a3f Any...

MAL-2026-405 Malicious code in anthropic-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49a0221a103a31cc2bf5e4f6c7d5fc7e0a8cbb2128d06aafe849e2c0df492fa8 The package anthropic-sdk was found to contain malicious code. Source: ghsa-malware fb69378ea2c4bf83cabc021e0e00f2cc8f87b8d9ddfd536f6e0285d10dbf4daf...

MAL-2026-391 Malicious code in internallib_v962 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9664f22a915362fceed28ec2e15ea4bfbc16dbdd91cb358cba05ef247fec36a5 The package internallibv962 was found to contain malicious code. Source: ghsa-malware 1e08ba6555343cafd51a03a186572eaf33065999ee721770a8d507645826dfd...

Malicious code in internallib_v962 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9664f22a915362fceed28ec2e15ea4bfbc16dbdd91cb358cba05ef247fec36a5 The package internallibv962 was found to contain malicious code. Source: ghsa-malware 1e08ba6555343cafd51a03a186572eaf33065999ee721770a8d507645826dfd...

MAL-2026-390 Malicious code in internallib_v325 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c291455afc990d6ae2ac49fa20ae7607e6da1a60e5d2ab5d745cfb065c6ca6c8 The package internallibv325 was found to contain malicious code. Source: ghsa-malware d5dedf497ea370ca0df69bffd7fd034f3df7e6dfd866e69f3ace19487df89c1...

Malicious code in jsonwebauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 683ba88a9e72aab5f114bdd388e92a35230a3fcad8178b8c8d5e5e6fddf7b829 The package jsonwebauth was found to contain malicious code. Source: ghsa-malware c1c270e023225a3ab0872fa3ea9f9b94b0320639bdaa6fb0d30e9b65c9ba1db2 An...

Malicious code in chai-dex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3981723ad48f842f54ac0b50b2d0002851c9aa3843894eb2b3032c5e9e49ce The package chai-dex was found to contain malicious code. Source: ghsa-malware 553083422e15551842621151db7ca73578cf9dcc235c0bec2fab4493009bea34 Any...

MAL-2026-387 Malicious code in chai-dex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3981723ad48f842f54ac0b50b2d0002851c9aa3843894eb2b3032c5e9e49ce The package chai-dex was found to contain malicious code. Source: ghsa-malware 553083422e15551842621151db7ca73578cf9dcc235c0bec2fab4493009bea34 Any...

Malicious code in chai-chain-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3340d37485bf0cbe47f2378b96588e8afadc83635bef93d108730ea72ab8f78 The package chai-chain-async was found to contain malicious code. Source: ghsa-malware a3404961b3edc416f501bf5ec175f0bbb95a188e9f1210305c9e37783e6265...

MAL-2026-386 Malicious code in chai-chain-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3340d37485bf0cbe47f2378b96588e8afadc83635bef93d108730ea72ab8f78 The package chai-chain-async was found to contain malicious code. Source: ghsa-malware a3404961b3edc416f501bf5ec175f0bbb95a188e9f1210305c9e37783e6265...

Malicious code in manage-root (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ade61c26597c5b0a24785713d87a304ddf30ae13dd50c69ba89e653ec4c2729 The package manage-root was found to contain malicious code. Source: ghsa-malware 6b0fc8397f56e86ac97a5adedd2c89de19045dffbdabbf982ffcf5944449b178 An...

Malicious code in private-internal-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 368f6bede2407a1000e1a32b729d86d4e32e054965cde08ce07b732266c11186 The package private-internal-sdk was found to contain malicious code. Source: ghsa-malware...

MAL-2026-393 Malicious code in manage-root (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ade61c26597c5b0a24785713d87a304ddf30ae13dd50c69ba89e653ec4c2729 The package manage-root was found to contain malicious code. Source: ghsa-malware 6b0fc8397f56e86ac97a5adedd2c89de19045dffbdabbf982ffcf5944449b178 An...

MAL-2026-403 Malicious code in worldnormal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 406eb16c91569acae88fa2f33de6107f6a758568c40b800908ac924d1a7e87fd The package worldnormal was found to contain malicious code. Source: ghsa-malware 1c9bf70b2f92f241477ec0cae21b7f094e1d4d1090cbb837bfd90fa9430f26ac An...

Malicious Package

Overview cko-ui-toolkit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview forms-new-design is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in @mikudev/ridwan-baileys-mod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf9b83afb1c7c6f2c72c03b913d2be0a9c6bee19bf6b07ad48deb0f09cb9e84b The package @mikudev/ridwan-baileys-mod was found to contain malicious code. Source: ghsa-malware...

Malicious code in @mikudev/signal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dddb766a44047fdc14156a60478172f91323f76100b8fc519f26d26397a2a915 The package @mikudev/signal was found to contain malicious code. Source: ghsa-malware f71f53e3538af5a0731e164d819b83390317e35e73a710f46338da15f2c82b4...

MAL-2026-384 Malicious code in @mikudev/signal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dddb766a44047fdc14156a60478172f91323f76100b8fc519f26d26397a2a915 The package @mikudev/signal was found to contain malicious code. Source: ghsa-malware f71f53e3538af5a0731e164d819b83390317e35e73a710f46338da15f2c82b4...

MAL-2026-381 Malicious code in @mikudev/beles (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8f3ea49ac3a40f6d28d2ebc50e1ef196be3d37c05e88065ad5a537d0dd88d75 The package @mikudev/beles was found to contain malicious code. Source: ghsa-malware 6dee4521aa58cbf67cc78b5a73b5d991fc017469415884ca3286fb252743f2a7...