MAL-2025-190724 Malicious code in @ensdomains/ccip-read-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f7c2d429d8a938e077f0a3c6d29aa4d7880c8ceabd54c6d63411a6db8b08bef The package @ensdomains/ccip-read-router was found to contain malicious code. Source: ghsa-malware...

Malicious code in @asyncapi/nodejs-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 882d41f9612d27876945ecf55500df19a306cfac18cf244eb72f05288a51222a The package @asyncapi/nodejs-template was found to contain malicious code. Source: ghsa-malware...

Malicious code in @ensdomains/thorin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b9c01ec760c3b86219974f606ccd10c9b872a38f725916392971a20b50e4b57 The package @ensdomains/thorin was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190761 Malicious code in @zapier/babel-preset-zapier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9189b0afaf74836818d1b081a853ae3fcc6193845bdbd74338171e535fd1391 The package @zapier/babel-preset-zapier was found to contain malicious code. Source: ghsa-malware...

Malicious code in @zapier/babel-preset-zapier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9189b0afaf74836818d1b081a853ae3fcc6193845bdbd74338171e535fd1391 The package @zapier/babel-preset-zapier was found to contain malicious code. Source: ghsa-malware...

Malicious code in redux-router-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3336c78dffab3cf95e60180dad5e67109d7de3e5dbfc888d10874c466a4088c The package redux-router-kit was found to contain malicious code. Source: ghsa-malware 6714063bc703d6750a4f6a6eedaa083372d15b7b9fa6eef3c58492ac74792b...

Malicious code in @ensdomains/ens-avatar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01d42aa5d8e1550b42c3f000d426b136d2f0a271a88bb0779306c670ab6c0613 The package @ensdomains/ens-avatar was found to contain malicious code. Source: ghsa-malware...

Malicious code in token.js-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c0ea628a23a78a7ef88dc4301ffbaf6515d00c92b331d0dfe518b6156d6cf01 The package token.js-fork was found to contain malicious code. Source: ghsa-malware c175fb9f3c6376f85f6e9b597aeaa381892983e4348984c54354174cca12f8a2...

Malicious code in @actbase/react-daum-postcode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b6730961ddc6bcfd14bc8564e2a8ef3d34d757e1ffae65ed7ff88232e115104 The package @actbase/react-daum-postcode was found to contain malicious code. Source: ghsa-malware...

Malicious code in @asyncapi/nodejs-ws-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06529fc17471f54f2c0fc317bca64f4b01fa049862dd2ce5863b33db8445b7ed The package @asyncapi/nodejs-ws-template was found to contain malicious code. Source: ghsa-malware...

Malicious code in @posthog/agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 183eda8dff43d0fa91f3006a2c3af5a268788a2dc9be3e53bd44d685b02f8432 The package @posthog/agent was found to contain malicious code. Source: ghsa-malware 1e1b7c3425dec8a1aa33daab74dd9163958811fa344ee6f8a795252daec78529...

Malicious code in test-hardhat-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8c58c4506524c992c75582a4ebe5865965b7bf58281bd247ee81b3b08731515 The package test-hardhat-app was found to contain malicious code. Source: ghsa-malware 03564b5c607dce5fdce1c0f5802eb5816a37d6f74acf0e5ae3624f6e9b2224...

Malicious code in @ensdomains/ens-validation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 173e84cfbbc1d7f66bf31e3f547ed242f523d13cbe076c7b1c70ad771cad5b53 The package @ensdomains/ens-validation was found to contain malicious code. Source: ghsa-malware...

Malicious code in @posthog/piscina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebd3d94d864b267499cd7c7897fa7fc4af2c420f3aa6bd152a0b22feae86418b The package @posthog/piscina was found to contain malicious code. Source: ghsa-malware 731794a5898b7ca6049626b91dad59ed65293d59335397c1989a1b45a498cb...

Malicious code in typeorm-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1ef9bad1469b974150720a17445c8403c0b0cd2bd2dbb393948afc47f102f95 The package typeorm-orbit was found to contain malicious code. Source: ghsa-malware a8e95331758f44ad97cde664359ec7ba72c0ad0c10caeaf02926a6007d23bb7f...

Malicious code in orbit-nebula-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39053d1e21106bb38ff0f67ad92e018d3e94dd368d8a9df7df45391acd94b852 The package orbit-nebula-editor was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190777 Malicious code in orbit-nebula-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39053d1e21106bb38ff0f67ad92e018d3e94dd368d8a9df7df45391acd94b852 The package orbit-nebula-editor was found to contain malicious code. Source: ghsa-malware...

Malicious code in @trigo/atrix-elasticsearch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0126e7ed19553bfe7d77922b8f8f506539820240400ca6a89a6d0fa4c657b7bb The package @trigo/atrix-elasticsearch was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190753 Malicious code in @posthog/siphash (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06113daabd3bc99b8cdcc1c4641266cebd61a5f0f10df264b2f37c955a121c20 The package @posthog/siphash was found to contain malicious code. Source: ghsa-malware ed632d6b4db6b2f74973167d160350198cd9130da004e958f2f1d51d217e9c...

MAL-2025-190752 Malicious code in @posthog/rrweb-record (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19ff125dfd13ba489699b36ca14acbab8e87eda739d43d9a31ef2a3a59903398 The package @posthog/rrweb-record was found to contain malicious code. Source: ghsa-malware...