Malicious code in weavedb-sdk-base (npm)

Source: amazon-inspector 40b4b0c5f79c0370a77c3b559b70389ffee591aa22c76ca15c4077fe95b5078e package.json declares "preinstall": "./bin/install-deps", pointing at a 976KB packed Linux x86-64 ELF binary shipped in the tarball sha256 36abd242ddaa27f0160c539377a0e92cf781c1695137850acc87e3892b436d36. Th...

@edoday/react-sdk (>=1.2.0, <=1.2.1), weavedb-client (>=0.9.2, <=0.45.4) +5 more potentially affected by unknown CVE via weavedb-base (>=0.9.7, <=0.45.4)

weavedb-base NPM version =0.9.7, =1.2.0, =0.9.2, =0.8.0, =0.21.0, =0.9.0, =0.9.0, =0.45.2 Source cves: unknown CVE Source advisory: GHSA-XJ9G-9FF6-G755...

Malicious code in weavedb-sdk-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40b4b0c5f79c0370a77c3b559b70389ffee591aa22c76ca15c4077fe95b5078e package.json declares "preinstall": "./bin/install-deps", pointing at a 976KB packed Linux x86-64 ELF binary shipped in the tarball sha256...

MAL-2026-4724 Malicious code in weavedb-sdk-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40b4b0c5f79c0370a77c3b559b70389ffee591aa22c76ca15c4077fe95b5078e package.json declares "preinstall": "./bin/install-deps", pointing at a 976KB packed Linux x86-64 ELF binary shipped in the tarball sha256...