Malicious code in supersig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 557f8e62aa65bb4fe5e96a52cf6c5ba83c2f1bcf47eca3027bf4daca071249e5 The published dist bundles dist/supersig.cjs.js, dist/supersig.esm.js, dist/supersig.umd.js, reached via the package's main/module/browser entries on...

bai-provider (1.0.10) potentially affected by unknown CVE via supersig (1.0.5)

supersig NPM version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on supersig and may be impacted: - bai-provider 1.0.10 Source cves: unknown CVE Source advisory: OSV:MAL-2026-13461...