MAL-2025-191155 Malicious code in wenk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 209b9df1ab21f1d5e193a2a9e68ece62122dc7979592c1f21599dd018aebfff7 The package wenk was found to contain malicious code. Source: ghsa-malware 440c248dbbb7a7c4fb5db4f70f71b5dd51ca4287f3d4e83c7caceeab7aee2dd8 Any...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...