Malicious code in toonfetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34259fc3807663e7c172b15e761dc591d545f94c836f98941c9c570667b3e0f4 The package toonfetch was found to contain malicious code. Source: ghsa-malware 8f1f64461d3d386d7d2181a773a457fff937a380dac27240d83dfca672319ee9 Any...

Malicious code in @trpc-rate-limiter/cloudflare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f7b0945d5b218d0b4e212ee38448f7de192939870c55e4ef4edb17bfc318d01 The package @trpc-rate-limiter/cloudflare was found to contain malicious code. Source: ghsa-malware...

Malicious code in @silgi/openapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da37d75ae054be71f7d9d4913bf4e5b1c0e7249774278432c33d89d871d99f28 The package @silgi/openapi was found to contain malicious code. Source: ghsa-malware 3c5eda9815ba5af459be6844eab3b3e9f5cb4615e738904bd8214eb62a2c93e7...

Malicious code in react-scrambled-text (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3888a54f9c5c14abb5fd0b64ec41778b1bc989da36cd5e48a480514eb81b9e57 The package react-scrambled-text was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191142 Malicious code in react-data-to-export (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1955002d61deae12965aabd7f49319a8cd75b916377002d839d153e5fd19d8e6 The package react-data-to-export was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191138 Malicious code in pergel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0beb04dcc264a7b8ea3f1b3c48c402609868184158f6bd8615a1f81fc5a29315 The package pergel was found to contain malicious code. Source: ghsa-malware 013990a2334d492668cc0d60833e3b2a30e9578b49ca1d8a75f904b5c82e1932 Any...

MAL-2025-191114 Malicious code in jsonsurge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09d795548cfda390ad25d33a8e7ce0d115cf76f9c2e6dedcb8459e15d41a2c72 The package jsonsurge was found to contain malicious code. Source: ghsa-malware ea90622d26555bede79ddb66877dfab50d3ff9cdb92fc4d8dbf1a8bd2c9d8497 Any...

MAL-2025-191046 Malicious code in @osmanekrem/bmad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 944b38bf9ed936861ce98cafc711d3d8a8b9cacdc551e5ea1142ea4143cb60aa The package @osmanekrem/bmad was found to contain malicious code. Source: ghsa-malware 4ec958dd0f9ea68f75efc0bfd5d3c3af3b068c9bd15c3a1806453debabae0a...

MAL-2025-191082 Malicious code in create-director-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d71b99ae491d4f679e88d87285e36727c75273f7aa0bcacaa8f435d799bb332b The package create-director-app was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191072 Malicious code in best_gpio_controller (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b598d2978754ee5475c3bd96f57df9ebcd271bf5ecb0201c94f15b05b53f1e9 The package bestgpiocontroller was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191122 Malicious code in lang-codes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7644eb22af82aaf1aeebcd8954139ce3dc9b43a0db43be02605ee10037e3f75 The package lang-codes was found to contain malicious code. Source: ghsa-malware 80738e6b29d50856453735fa6d92a27222eb3def027ae81195eb7555e076f7df Any...

MAL-2025-190964 Malicious code in hopedraw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9b92770a39e89559f4745f8c6d264f55c2f56aa858388f2b23fe19d8ac5cfb7 The package hopedraw was found to contain malicious code. Source: ghsa-malware 5816fd13331bdf9cddedac9d250bbe6f4d28bafe88b9bea201c4f6cbbb1f2448 Any...

MAL-2025-190962 Malicious code in haufe-axera-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e49957e5f8983a7e16bd6d6377b03e200addbb6bd6dcd834f6370b5fa5f77061 The package haufe-axera-api-client was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190936 Malicious code in typefence (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c9ac344bf18963e146d64aec1de72c3db819eb2c4356be7257ef1980555a17f The package typefence was found to contain malicious code. Source: ghsa-malware 28d8025e6d485b7679079ba265b2ed9a28c10029903c94441308121d974cbf18 Any...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...