PT-2025-47991

A Looker user with a Developer role could cause Looker to execute a malicious command, due to insecure processing of Teradata driver parameters. Looker-hosted and Self-hosted were found to be vulnerable. This issue has already been mitigated for Looker-hosted instances. No user action is required...

Malicious code in @lui-ui/lui-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59b88c15ab970fa80e2c420db246728871b310f27e35371206322bf8cea6abb1 The package @lui-ui/lui-vue was found to contain malicious code. Source: ghsa-malware 339d88eca55085f7dbfd769a5800adf59a499c0e6e14500a6f456cf17ec249f...

MAL-2025-191245 Malicious code in @lui-ui/lui-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59b88c15ab970fa80e2c420db246728871b310f27e35371206322bf8cea6abb1 The package @lui-ui/lui-vue was found to contain malicious code. Source: ghsa-malware 339d88eca55085f7dbfd769a5800adf59a499c0e6e14500a6f456cf17ec249f...

MAL-2025-191410 Malicious code in quickswap-smart-order-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65a1978f5a844fe2a4875f031a7498db4411fdf687fe752f1dbbcea7a6a31fba The package quickswap-smart-order-router was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191442 Malicious code in uniswap-smart-order-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dbda3147fde915a97ddd97f51f5ebc1757fa14bca7cad95f333862ad125c3c1 The package uniswap-smart-order-router was found to contain malicious code. Source: ghsa-malware...

Malicious code in @hapheus/n8n-nodes-pgp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9928cceb0a0a0ad3dbb386bd7f76fffc669c730ec26b54080a69b67bb12ba6f0 The package @hapheus/n8n-nodes-pgp was found to contain malicious code. Source: ghsa-malware...

Malicious code in @fishingbooker/react-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90a19dbfbd7292340e4857d9c40d537185efb1402a471df4b8346b4ae3575d3f The package @fishingbooker/react-loader was found to contain malicious code. Source: ghsa-malware...

Malicious code in @everreal/web-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77c0514435a2fcfbbc44b6691737ce9fa17b0397b9cbd490173d9dca9fa18adc The package @everreal/web-analytics was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191108 Malicious code in ids-enterprise-ng (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02ae15f729fa23d65989e0f3873d023de175ecf54bb2b230df46861c246bf7df The package ids-enterprise-ng was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191150 Malicious code in victoriaxoaquyet-wallet-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11c392a47bef024ed55b8fa5f13c1629cc9565b281683139ffd90449d4868386 The package victoriaxoaquyet-wallet-core was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191130 Malicious code in ngx-wooapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64a7e8ff946dd01747d5da4806be36032cebaf9ed78da76e88680ece90c066be The package ngx-wooapi was found to contain malicious code. Source: ghsa-malware 6bafe828b44a7293999ec4bd01079f40fff2fe77bb43d6990dc20bcbc6b83162 Any...

MAL-2025-190980 Malicious code in next-simple-google-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65c0df29a06f4738e26d90f0418c197f39ad60e98981f43cff7baaa82a672ced The package next-simple-google-analytics was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191006 Malicious code in react-native-websocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f48d8c015af60bd1c1cbe48b9005dbbde091d8abc3763d25544d978b8b133094 The package react-native-websocket was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190965 Malicious code in hover-design-prototype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db96c13324b014e92e639e93401c356c60bdd7d020bc22c5327900ccbab0220a The package hover-design-prototype was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190956 Malicious code in docusaurus-plugin-vanilla-extract (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2659e389b89fcdf1fe723b544962764d4f2881cae9694dc4107fbbb4ec077328 The package docusaurus-plugin-vanilla-extract was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190953 Malicious code in css-dedoupe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7708f95527bfb987e5bf71ee911acffc550f40aff1b046d3249c9504c14fd52f The package css-dedoupe was found to contain malicious code. Source: ghsa-malware 9bad835f3386b87b3ce781849db6a96394982d6a092ee635c731d854493dd197 An...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...