Malicious code in finkrouter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75cee0798d304ff9f0532df845511df6560314b8808664c15b3c3aa18f1953b5 The package's CLI shipped as cli.obf.js, the javascript-obfuscator output with RC4 string-array encoding and control-flow flattening per package.json...

Malicious Package

Overview @aifabrix/miso-client is a malicious package. This package was affected by the 'GlassWorm' supply chain attack. It includes a hidden malicious payload embedded with invisible Unicode characters. These characters hide a decoder that retrieves and executes a concealed payload through eval...

Malicious Package

Overview prefer-let is a malicious package. This package was recognized as part of the 'PhantomRaven' supply chain campaign, which involves credential-stealing malware. The package impersonates well-known ecosystem plugins to deceive developers into installing it. Malicious Behavior The package...

Malicious code in @oku-ui/motion-nuxt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f92b87caa59206174882fe75cd77964bc3f31b824958a07a22210e50eeb21ac9 The package @oku-ui/motion-nuxt was found to contain malicious code. Source: google-open-source-security...

MAL-2025-191233 Malicious code in @huntersofbook/ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 864ad7e5ee11e8337962d5e5ae089ecddbc48e77c50611aadbdab9feb097edfd The package @huntersofbook/ui was found to contain malicious code. Source: google-open-source-security...

Malicious code in @dev-blinq/ai-qa-logic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bcfefccc1ff9a7579321c6e45d16fc6aa94b9eaa45952fe47d415c2ffcde9a4 The package @dev-blinq/ai-qa-logic was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191251 Malicious code in @oku-ui/avatar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23d026f94dcbe031cd4e8c72102d71358e1909bb7b14a95645e7fd46d955e0c9 The package @oku-ui/avatar was found to contain malicious code. Source: google-open-source-security...

MAL-2025-191344 Malicious code in @voiceflow/encryption (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13e58f7cdcdf3b87f5bbf111e42e13a1151626e495e15be73fc579109e397800 The package @voiceflow/encryption was found to contain malicious code. Source: ghsa-malware...

Malicious code in @voiceflow/chat-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 427a4ea537f2410d7af761667dfaa0440a0ddbf74e1a963230491a8d6155e4fd The package @voiceflow/chat-types was found to contain malicious code. Source: ghsa-malware...

Malicious code in @browserbasehq/stagehand (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0147cee6c903a9fd8dabfedd42c60df91437e6a7a750bebff3c26ce687d4443a The package @browserbasehq/stagehand was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191368 Malicious code in @voiceflow/runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a8c6b88ad67d8ceece37df9641f6712f7047aa566957d0937eb3ca99aed10dd The package @voiceflow/runtime was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191366 Malicious code in @voiceflow/prettier-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d559f73440d8fdf3f6f155244ce54b5d8d829700d5780778a26f0ac94fb5b59e The package @voiceflow/prettier-config was found to contain malicious code. Source: ghsa-malware...

Malicious code in silgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bab0537c840944fd6fac261deaaca0e3581745c3412d28b7ae3f0f014361c70 The package silgi was found to contain malicious code. Source: ghsa-malware 93a7af2f566e0384a306202ff261bb7cdc496fb32e582afda5808432c3ca4935 Any...

MAL-2025-191302 Malicious code in @productdevbook/auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 884cad7d1d5eb715a5945ab44c4acd884887a533f4c4334d0d88ccad9a7dd618 The package @productdevbook/auth was found to contain malicious code. Source: google-open-source-security...

MAL-2025-191191 Malicious code in @antstackio/shelbysam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b11f3b36cf4d67018deed9546e206b16b8fa148a32c0802a5e8c51998f1c17e The package @antstackio/shelbysam was found to contain malicious code. Source: google-open-source-security...

Malicious code in @voiceflow/commitlint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0318a598c3e523953b57c870305c3d1237a290a253f3d69dd9f24bf6ba079d6e The package @voiceflow/commitlint-config was found to contain malicious code. Source: ghsa-malware...

Malicious code in @oku-ui/toggle-group (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb7f999444c4458fefe9d248fe0eaf410814ecbb5343107fe992033a61d184f3 The package @oku-ui/toggle-group was found to contain malicious code. Source: google-open-source-security...

Malicious code in selenium-session-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c213ecffb94ad5db9053c2dcf20681d6fe3a5baa0b8ed42d87e01c7ef930a704 The package selenium-session-client was found to contain malicious code. Source: google-open-source-security...

MAL-2025-191247 Malicious code in @mizzle-dev/orm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd528c11fe54881e4913d51e5acc448562c3fc1b7edaae7aa2a40e6b12425f55 The package @mizzle-dev/orm was found to contain malicious code. Source: ghsa-malware c327219099fb121baf202032e61fc1b4881236e892dea9b4aa2b6159f953696...

Malicious code in posthog-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b422f278bf27e062b349e97360b6919e773122f21656f23d6da583ce7cb1a92 The package posthog-js was found to contain malicious code. Source: google-open-source-security...