MAL-2026-13277 Malicious code in dlab_workshop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 452b525d6d3fc409e081d5f8a6f052c7b3b9899d1f088a24d93e4be4de65c9cf The package's index.js reads installer-owned secret files from the home directory /.ssh/idrsa, /.ssh/ided25519, /.ssh/config, /.aws/credentials,...

Malicious code in bip32-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 115345055f99da651c7816286c6b076dbacdd2b659f466dded1a541b289e8c2d bip32-js is a typosquat of the legitimate bip32 crypto library. Its index.js is an empty stub module.exports = ; the package's only functional code i...