Malicious code in @luminarycloudinternal/lcvis-st (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce8dffb72c9f767cbd071bf482fce9acb1ff2283a4800b7862739348b7a89e24 Package @luminarycloudinternal/[email protected] is published to the public npm registry under an internal-looking scope with an artificially high...

MAL-2026-5524 Malicious code in @orion-design-system/store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4218505b74ba258cea12df713bbc27db9fa58d6660cf83e6d0c5fd8a9f68a4c2 package.json declares a preinstall script that runs on every npm install. The script uses node -e to require os and https, reads os.hostname and...

Malicious code in @nstrlabs/ixel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64b10f7a8ca25ac33a6d1e94038d1dbfd68d113d9ab7d7a428d97417b3409c7d On npm install, the package runs node index.js via a preinstall lifecycle hook declared as "preinstall": "node index.js || true" so failures are...

MAL-2025-191038 Malicious code in @oku-ui/focus-scope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b522d408beeb4d64a63002599086596cf35f82c8e022fb27d833b26ebc23d54 The package @oku-ui/focus-scope was found to contain malicious code. Source: ghsa-malware...

Malicious code in @oku-ui/focus-scope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b522d408beeb4d64a63002599086596cf35f82c8e022fb27d833b26ebc23d54 The package @oku-ui/focus-scope was found to contain malicious code. Source: ghsa-malware...

MAL-2025-3134 Malicious code in valid-ip-scope (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7465414603f3c8dda0d63ea47cec0337ce0286407a8c488100a46b5a78a5b49d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...