MAL-2026-18491 Malicious code in @corexium/xbails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e3ba0508c4009825b9eb3d248094ccbf28b2a2b4dcec420d1aaa533c1594729 package.json aliases the import name 'libsignal' to the third-party npm package '@bellaxchuu/libsignal-node' pinned only to the mutable '@latest'...

Malicious code in @corexium/xbails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e3ba0508c4009825b9eb3d248094ccbf28b2a2b4dcec420d1aaa533c1594729 package.json aliases the import name 'libsignal' to the third-party npm package '@bellaxchuu/libsignal-node' pinned only to the mutable '@latest'...