MAL-2025-55018 Malicious code in graphhub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f3f531a91594ad386dc82c959af2f53b1e335972b4a7a451fe0184252616c3 The package graphhub was found to contain malicious code. Source: ghsa-malware 4b0d6ee11320721cc3e65d9887c3b251b574bc7e67419fe63dedaa18b15dad9b Any...

MAL-2025-50728 Malicious code in phantom-fixer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12a29d0b7233f4c6d8534448b0202eaddc448817008782120ede8110b31b010d The package phantom-fixer was found to contain malicious code. Source: ghsa-malware 08b29349698428ef5ef1924bece07e739b2c0dc4ee6be172dba838e6c5e4dabd...

Malicious code in react-icons-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224e1d5b1a2b01321da822c843e2013f28320e4b9d4d74487daef59c812557f6 The package react-icons-toolkit was found to contain malicious code. Source: ghsa-malware...

Malicious code in zcash-easy-miner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e47755c29c024cf295a8deba084ae4ecd371b00b9e828f92a588fa5855595351 The package zcash-easy-miner was found to contain malicious code. Source: ghsa-malware 961be38007c4d39afa3574fcfb0b541985648d133866ab95f54133187aa42e...

MAL-2025-50731 Malicious code in telegram-travis-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f21c0fea0fd00ecd7a983e99a6525746ac36f46a54288cb02a5c9aa852f2d4ac The package telegram-travis-api was found to contain malicious code. Source: ghsa-malware...

MAL-2025-50727 Malicious code in cursor-bypass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e766d6bd0642a1f0423b016e09152c9fa7f128508c9c6a86ac0745057bd0459 The package cursor-bypass was found to contain malicious code. Source: ghsa-malware 8436dfbf6d130c554b6951669c65c036993527815d340f7b529e3368ed47a7db...

Malicious code in phantom-fixer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12a29d0b7233f4c6d8534448b0202eaddc448817008782120ede8110b31b010d The package phantom-fixer was found to contain malicious code. Source: ghsa-malware 08b29349698428ef5ef1924bece07e739b2c0dc4ee6be172dba838e6c5e4dabd...

MAL-2025-50732 Malicious code in zcash-easy-miner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e47755c29c024cf295a8deba084ae4ecd371b00b9e828f92a588fa5855595351 The package zcash-easy-miner was found to contain malicious code. Source: ghsa-malware 961be38007c4d39afa3574fcfb0b541985648d133866ab95f54133187aa42e...

Malicious code in telegram-travis-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f21c0fea0fd00ecd7a983e99a6525746ac36f46a54288cb02a5c9aa852f2d4ac The package telegram-travis-api was found to contain malicious code. Source: ghsa-malware...

MAL-2025-50729 Malicious code in react-icons-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224e1d5b1a2b01321da822c843e2013f28320e4b9d4d74487daef59c812557f6 The package react-icons-toolkit was found to contain malicious code. Source: ghsa-malware...

MAL-2025-50730 Malicious code in synqroomkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 914da44da2183d035b344098fd0e5fe8c942b80666fa3cbcf855efc2b2239faf The package synqroomkit was found to contain malicious code. Source: ghsa-malware 55bfdc58beccccc6ae0646990cdc186d46c910ef90f5abdcf0c6e4d1d8b52024 An...

Malicious code in synqroomkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 914da44da2183d035b344098fd0e5fe8c942b80666fa3cbcf855efc2b2239faf The package synqroomkit was found to contain malicious code. Source: ghsa-malware 55bfdc58beccccc6ae0646990cdc186d46c910ef90f5abdcf0c6e4d1d8b52024 An...

Malicious code in dandh811 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19da138a15aafecca5e956762f4d1408b284e452f2afc522d2fe1e8f9549a95d The package dandh811 was found to contain malicious code. Source: ghsa-malware ff1136cf9e4afdd278837f2b23779df88ca82c593d3a3e063dab99161adc3f56 Any...

MAL-2025-49729 Malicious code in dandh811 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19da138a15aafecca5e956762f4d1408b284e452f2afc522d2fe1e8f9549a95d The package dandh811 was found to contain malicious code. Source: ghsa-malware ff1136cf9e4afdd278837f2b23779df88ca82c593d3a3e063dab99161adc3f56 Any...

MAL-2025-49730 Malicious code in dandh8112 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06f2bb5fabeb29dfa7cd1921c6c28f491ec017dddaae26b427f956b1f5f3c288 The package dandh8112 was found to contain malicious code. Source: ghsa-malware 439693dc034f10b79277c48f7d3457adc09a623d5d067afa83543f5393f8825e Any...

Malicious code in huangming-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53612bb1244997357931275dea1924a477215c7db7ab8297f2fead735926859e The package huangming-demo was found to contain malicious code. Source: ghsa-malware 503c69173f37b1e6d7f159b77bb5f5a3bb677dff293fb44f2a09038a31172fdb...

Malicious code in rce-poc-test-honor-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 216f60aec8616ca96e607a879e30241ea807ed24fcb4b775afc5b8ef4d3f4a09 The package rce-poc-test-honor-mcp was found to contain malicious code. Source: ghsa-malware...

Malicious code in rce-poc-test-honor-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b66eed52fc0c24b51f24da6c244c23fc29ce6228dd4a97a0606f71bb254f02b7 The package rce-poc-test-honor-dev was found to contain malicious code. Source: ghsa-malware...

Malicious code in xss-payload-all (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c825aada16e0da858a5e9f4b836a1c7a9e4b6e2727d285ff60e8634deb99848 The package xss-payload-all was found to contain malicious code. Source: ghsa-malware bf42864a16e802aec4ff8ec23d71f82c73ac809e44e56a55bcec163b05f539a...

MAL-2025-49388 Malicious code in xss-payload-all (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c825aada16e0da858a5e9f4b836a1c7a9e4b6e2727d285ff60e8634deb99848 The package xss-payload-all was found to contain malicious code. Source: ghsa-malware bf42864a16e802aec4ff8ec23d71f82c73ac809e44e56a55bcec163b05f539a...