MAL-2025-190951 Malicious code in composite-reducer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eecfe869a6cc75f59e734412ec583d6bb95ddaab6b45c9c22526ba7b556e004 The package composite-reducer was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190950 Malicious code in compare-obj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1892ab55a1dcdd44c7f030aef1ae76a865ffffe4b7a0d4a0492696c149db2e4d The package compare-obj was found to contain malicious code. Source: ghsa-malware 3a7310cc13d858af4c2dfc25ec5d42cf6aa52b00dd7fc28ba0ee069a68e7551b An...

MAL-2025-190948 Malicious code in coinmarketcap-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cf4ed85361338b02dab2cd93a7a4b750f9831838300ce645886aa8e5ef0fb48 The package coinmarketcap-api was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191009 Malicious code in sa-id-gen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df00f4b56b9be72c09e3f99938b4c41900b44a98e65eb46896c30209f7f0810d The package sa-id-gen was found to contain malicious code. Source: ghsa-malware 3f0da651d111107f348b8807e1fabc4c0ad1125e1af1e268745224c9d81c77fc Any...

MAL-2025-191010 Malicious code in set-nested-prop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e3ace4ffb79a5de4b7a82ae75ffdcccb6233dce2bfa2a4f32f70a3dc6921a03 The package set-nested-prop was found to contain malicious code. Source: ghsa-malware 35b0b9a8f67ec13668f93a14f45e037dc7cb3c33fa4c688e13b10a3cd2c5d3a...

MAL-2025-191011 Malicious code in sort-by-distance (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e18da0b56bd15f23c5f0d3dcb5a2f08b07ee8e495d121029cbeebaf023ce50f The package sort-by-distance was found to contain malicious code. Source: ghsa-malware b5f4152194e53195be1b2e405488269c046c584acfa9cc1f828115c2a1b0b7...

MAL-2025-191012 Malicious code in south-african-id-info (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e086352ee820c350aadcfbcb3d69f34586e6a94ec2237005a12cf89a4b6091ba The package south-african-id-info was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191013 Malicious code in stat-fns (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5395e07a1f1a743d77d42495c7eaf08cb0ced22a0b0883b53b5adf78beef28a The package stat-fns was found to contain malicious code. Source: ghsa-malware 6c2e197e85b015babcf3a2073e3f76b980a3ae924a49a20d9c1648c610d7d3c0 Any...

MAL-2025-191014 Malicious code in stoor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7b7532a301c81deec9ab17a09d1b99034890bb7c52da539cebf9959e067d00b The package stoor was found to contain malicious code. Source: ghsa-malware be82c913cadb695dde12c8181a4caebf5a0ab0fedc2040c8a874418051174e67 Any...

MAL-2025-191015 Malicious code in super-commit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c1af7533a4794e88dc233547249b656c3a1fd1a87109827755918da11151fbe The package super-commit was found to contain malicious code. Source: ghsa-malware 4ef89565a74f08dc54807acd41e1218c07d6d9ffdb73411163e95c66ba080e61 A...

MAL-2025-191017 Malicious code in svelte-toasty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd148faed79826bf40f8bee2ac4f3aee5c75ec85e9ca81d1a9ed972db4a17a26 The package svelte-toasty was found to contain malicious code. Source: ghsa-malware 33e60836cd791de23038b867cd4e97fb21298208fc87c6b2096fe0e189d3fc86...

MAL-2025-191019 Malicious code in tcsp-draw-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3aab2e2be47f975ef5d6dcbb26dd22621b6043ca130bcd094aa6524696873a3 The package tcsp-draw-test was found to contain malicious code. Source: ghsa-malware a0c29ab38c3bc97e4948587b9e49496e015ba0ed1f2b292e49fad4a91b6380c2...

MAL-2025-191020 Malicious code in tcsp-test-vd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9f8fd99690655a6e155948c83b8baf3c7d03d10aa4adec3a8e87ed21a96921e The package tcsp-test-vd was found to contain malicious code. Source: ghsa-malware bbc33c9b0da4ee5d72787025ea4a8ca6f7c7b140ba2cb7fa40a3cf6703cb61c8 A...

MAL-2025-191022 Malicious code in template-micro-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a11182cb9c66d55101737e1db16a1baf528ddd4f3a498c74acfc75da64fd92b5 The package template-micro-service was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190938 Malicious code in uplandui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22f9a52e37653e2c0d85c55db9f1173d503391434bb0a2667b8ae8e57f1ed92b The package uplandui was found to contain malicious code. Source: ghsa-malware e26bf91e39b976ff5aa4107bd8140380fdceeb1de6c12a9fd9993d1ff16642aa Any...

MAL-2025-190940 Malicious code in url-encode-decode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37ce07aaa237eff3cc95c7bb560f4096191d2d5328de45f176f3f8662ca7cd34 The package url-encode-decode was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190941 Malicious code in use-unsaved-changes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96deeb533a3de753f2de9201e46a0a8ccfa79d22d848ed8cbb20f19b36242ae6 The package use-unsaved-changes was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190942 Malicious code in valid-south-african-id (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a363caeeaaa83a715f0d38b64608e11a39a272a42abe53c92dbbacb133dc927 The package valid-south-african-id was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190944 Malicious code in wellness-expert-ng-gallery (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba93ea812053d1ede65994da95ddd6a39a75002e9ec11387d69ca38f99980fb3 The package wellness-expert-ng-gallery was found to contain malicious code. Source: ghsa-malware...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...