Malicious code in weavedb-sdk-node (npm)

Source: amazon-inspector 59e557cd0501bb17925a19c5d3525fdf18f286b21750a44c0164eb7e165f55d9 package.json declares "preinstall": "./dist/runtime.node", causing npm to execute a 976 KB packed binary on every install. The file uses the .node extension typically reserved for Node.js native addons loade...

@edoday/react-sdk (>=1.2.0, <=1.2.1), weavedb-client (>=0.9.2, <=0.45.4) +5 more potentially affected by unknown CVE via weavedb-base (>=0.9.7, <=0.45.4)

weavedb-base NPM version =0.9.7, =1.2.0, =0.9.2, =0.8.0, =0.21.0, =0.9.0, =0.9.0, =0.45.2 Source cves: unknown CVE Source advisory: GHSA-XJ9G-9FF6-G755...

MAL-2026-4725 Malicious code in weavedb-sdk-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59e557cd0501bb17925a19c5d3525fdf18f286b21750a44c0164eb7e165f55d9 package.json declares "preinstall": "./dist/runtime.node", causing npm to execute a 976 KB packed binary on every install. The file uses the .node...