MAL-2026-422 Malicious code in oce-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b843dd5f2dd468eea116bc6b01258c72903738ea423def44e73bbee3e0a477f The package oce-icons was found to contain malicious code. Source: ghsa-malware e946a5aefa4f4734044a2667883bff32c43c93401630708063066e1348fb2b25 Any...

MAL-2026-428 Malicious code in shroom-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12ce31b267373b04b6db8fa70688917b146c9cf34f2d548b58890a950af4f32a The package shroom-kit was found to contain malicious code. Source: ghsa-malware df93160efafaee42f3f1c238618282cd6845e4fea4f6b0804f5e759934e60f71 Any...

MAL-2026-410 Malicious code in clerk-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 380b4e8d88a5d8a96ffe344566787326dbace52224d29a853cd4553fac40bd1c The package clerk-js was found to contain malicious code. Source: ghsa-malware 2433ecd39bbf328a21740fa34f33bb09d575e76f6f280b915c7ea15fbc55c2b3 Any...

Malicious code in oce-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a3bb1f0bc8596c323c58dd811956c6002337f6f9f660adb266b7b722880705d The package oce-components was found to contain malicious code. Source: ghsa-malware 01822c3aed2c0b5e7611959aab8ed47c7722edbc8cef5b339dd6413805eecdda...

Malicious code in oce-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b843dd5f2dd468eea116bc6b01258c72903738ea423def44e73bbee3e0a477f The package oce-icons was found to contain malicious code. Source: ghsa-malware e946a5aefa4f4734044a2667883bff32c43c93401630708063066e1348fb2b25 Any...

Malicious Package

Overview connect-web is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

Malicious code in clerk-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 380b4e8d88a5d8a96ffe344566787326dbace52224d29a853cd4553fac40bd1c The package clerk-js was found to contain malicious code. Source: ghsa-malware 2433ecd39bbf328a21740fa34f33bb09d575e76f6f280b915c7ea15fbc55c2b3 Any...

Malicious code in collaborate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ebbe8909025711e34022d8c3556eac89c554324e133deb4b5fea65acbc33ef6 The package collaborate was found to contain malicious code. Source: ghsa-malware 4497ac6f05c2ec9a7b4b2328613c2fe85d955300a510ecaca8427c13d952a217 An...

MAL-2026-419 Malicious code in oce-collaborate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8f69f2284ec7835136d41eb191227cc52ebfeafd3b33c0f7ce2d94ffd24cb88 The package oce-collaborate was found to contain malicious code. Source: ghsa-malware c217eb60fb78e5a6fde1b59cd586b4ad864bd1ad9cde77d6b50a79341d4d58d...

Malicious code in oce-collaborate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8f69f2284ec7835136d41eb191227cc52ebfeafd3b33c0f7ce2d94ffd24cb88 The package oce-collaborate was found to contain malicious code. Source: ghsa-malware c217eb60fb78e5a6fde1b59cd586b4ad864bd1ad9cde77d6b50a79341d4d58d...

MAL-2026-420 Malicious code in oce-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a3bb1f0bc8596c323c58dd811956c6002337f6f9f660adb266b7b722880705d The package oce-components was found to contain malicious code. Source: ghsa-malware 01822c3aed2c0b5e7611959aab8ed47c7722edbc8cef5b339dd6413805eecdda...

Malicious code in kanban-webcomponent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec3c671a99b49533fbfeaf2dd948f86f14d82ee338f622af22283b774159881f The package kanban-webcomponent was found to contain malicious code. Source: ghsa-malware...

Malicious code in bitbot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12996eb5ffac4767e62d0de9652080c360a42cc716421449362f9443c0ec02f4 The package bitbot was found to contain malicious code. Source: ghsa-malware 8167eda858c69a7322383c658afb961cdead784baba89931b2a10c0856c4a0cc Any...

Malicious code in coopshares-webcomponent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a2f65589819f3e12665d8524a5db477f2c222a83ed178b584e7cf8e5901ead2 The package coopshares-webcomponent was found to contain malicious code. Source: ghsa-malware...

MAL-2026-413 Malicious code in coopshares-webcomponent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a2f65589819f3e12665d8524a5db477f2c222a83ed178b584e7cf8e5901ead2 The package coopshares-webcomponent was found to contain malicious code. Source: ghsa-malware...

MAL-2026-433 Malicious code in wallet-adapter-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edd2a29de3dd67bd591f660c8b964bc262ba1967f0338d11a9e015ee04448c87 The package wallet-adapter-react was found to contain malicious code. Source: ghsa-malware...

Malicious code in wallet-adapter-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edd2a29de3dd67bd591f660c8b964bc262ba1967f0338d11a9e015ee04448c87 The package wallet-adapter-react was found to contain malicious code. Source: ghsa-malware...

Malicious code in sign-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e300b5f52fc165080a7c0a9eee170ee453c31a0419dc65e004a64b0749b699cf The package sign-client was found to contain malicious code. Source: ghsa-malware d46bf80205dc64dc9e6d65d1208f0b6e1a978d8dfdd555fbb2c9eb31805df69c An...

MAL-2026-405 Malicious code in anthropic-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49a0221a103a31cc2bf5e4f6c7d5fc7e0a8cbb2128d06aafe849e2c0df492fa8 The package anthropic-sdk was found to contain malicious code. Source: ghsa-malware fb69378ea2c4bf83cabc021e0e00f2cc8f87b8d9ddfd536f6e0285d10dbf4daf...

Malicious code in hw-app-eth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b26da97535a707e0e93acd8bc34d6e7ad13756f38c37d34b362a36d4dbdef24a The package hw-app-eth was found to contain malicious code. Source: ghsa-malware 2f92f05cefb6ff5250762470390af00c1d4ccaf51b04cf8f1c15ab1721573a3f Any...