Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Malicious code in @trigo/atrix-pubsub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 774898dc5178ad4bd2128a0ec966ceb51a9cc46c9884a0618869d7525c96260c The package @trigo/atrix-pubsub was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190828 Malicious code in @trigo/atrix-pubsub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 774898dc5178ad4bd2128a0ec966ceb51a9cc46c9884a0618869d7525c96260c The package @trigo/atrix-pubsub was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198849

Malicious code in @trigo/atrix-pubsub npm...

@trigo/atrix (>=6.0.0-10 <=7.0.0-alpha5), @trigo/atrix-mongoose (>=1.0.0 <=1.0.1) potentially affected by unknown CVE via @trigo/hapi-auth-signedlink (=1.3.0)

@trigo/hapi-auth-signedlink NPM version =1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on @trigo/hapi-auth-signedlink and may be impacted: - @trigo/atrix =6.0.0-10, =1.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-190829...

EUVD-2025-198848

Malicious code in @trigo/hapi-auth-signedlink npm...

Malicious code in @trigo/atrix-elasticsearch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0126e7ed19553bfe7d77922b8f8f506539820240400ca6a89a6d0fa4c657b7bb The package @trigo/atrix-elasticsearch was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190760 Malicious code in @trigo/atrix-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39b1328f74edf78d2b44ee487b5ea36c148e8b07a8f3bb83240f4adaa4b6c0f5 The package @trigo/atrix-soap was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198660

Malicious code in @trigo/pathfinder-ui-css npm...

Malicious code in @trigo/pathfinder-ui-css (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17172dc9e8dbb38a33e93a30996ed58f73c89d22d064635c816f92f8697a5013 The package @trigo/pathfinder-ui-css was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190695 Malicious code in eslint-config-trigo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 715567b8ffcce461fdad7a03986cd0ca9569785f6a0dcfad594a041fce4c88bb The package eslint-config-trigo was found to contain malicious code. Source: ghsa-malware...

Malicious code in eslint-config-trigo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 715567b8ffcce461fdad7a03986cd0ca9569785f6a0dcfad594a041fce4c88bb The package eslint-config-trigo was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198661

Malicious code in eslint-config-trigo npm...

EUVD-2025-198662

Malicious code in @trigo/fsm npm...

MAL-2025-190685 Malicious code in @trigo/fsm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d47f4a2a33c66b0dd4885e14a3daac5b93ab92ff16f42af9a40c7883bc0a8fe7 The package @trigo/fsm was found to contain malicious code. Source: ghsa-malware 3a0c1d2449da835d77ebed8c99e152a8d6a2015eb1ce5d754808650e257c7776 Any...

Malicious code in @trigo/atrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 558f6feeb49a87304641f2c0c9925edfed565c25407412c22ec77f6dd814dc4f The package @trigo/atrix was found to contain malicious code. Source: ghsa-malware 305ce62c26f6bb221f9779da6dd55b49fd970a1bf8939a813a5951bb2e4f5a07 A...

EUVD-2025-198663

Malicious code in @trigo/atrix npm...