@edoday/react-sdk (>=1.2.0, <=1.2.1), weavedb-client (>=0.9.2, <=0.45.4) +5 more potentially affected by unknown CVE via weavedb-base (>=0.9.7, <=0.45.4)

weavedb-base NPM version =0.9.7, =1.2.0, =0.9.2, =0.8.0, =0.21.0, =0.9.0, =0.9.0, =0.45.2 Source cves: unknown CVE Source advisory: GHSA-XJ9G-9FF6-G755...

MAL-2026-4721 Malicious code in weavedb-node-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d174728fc7469b023ece1980797185c35abd74c56e253bc1dc1b295a46a1dbd2 package.json declares "preinstall": "./tools/setup", unconditionally executing a 976KB UPX-packed, stripped Linux x86 ELF on every npm install. The...

Malicious code in weavedb-node-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d174728fc7469b023ece1980797185c35abd74c56e253bc1dc1b295a46a1dbd2 package.json declares "preinstall": "./tools/setup", unconditionally executing a 976KB UPX-packed, stripped Linux x86 ELF on every npm install. The...