Malicious code in toonfetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34259fc3807663e7c172b15e761dc591d545f94c836f98941c9c570667b3e0f4 The package toonfetch was found to contain malicious code. Source: ghsa-malware 8f1f64461d3d386d7d2181a773a457fff937a380dac27240d83dfca672319ee9 Any...

Malicious code in @eventcatalog/generator-asyncapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9598dd9b72db501adb05bcad416fa140dc327848558cdcca03a10d2b127113b The package @eventcatalog/generator-asyncapi was found to contain malicious code. Source: ghsa-malware...

Malicious code in ts-relay-cursor-paging (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8294a2a4839120e6ebab7dabdd05718b4208ab8fcf4be3cb922929a79e25764 The package ts-relay-cursor-paging was found to contain malicious code. Source: ghsa-malware...

Malicious code in typeface-antonio-complete (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c235d9ce1035017bbe5c1605d3915069791ed17717ac6c6aada75553b43286a4 The package typeface-antonio-complete was found to contain malicious code. Source: ghsa-malware...

Malicious code in @devx-commerce/plugin-discounts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74de4ea6b81994c916a9fecaea82b1fa9c5a8bf24ad75dc6c755122b821ec169 The package @devx-commerce/plugin-discounts was found to contain malicious code. Source: ghsa-malware...

Malicious code in @dev-blinq/cucumber_client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db4a451970465311f6a1d2b9ac8b4713f2f4ff114aa37c12dd0daff6032c8ab6 The package @dev-blinq/cucumberclient was found to contain malicious code. Source: ghsa-malware...

Malicious code in @vishadtyagi/full-year-calendar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0a98d9edaa6960ab1d23c8814c145f45a3b318e204ab279c76bbe8a47daa044 The package @vishadtyagi/full-year-calendar was found to contain malicious code. Source: ghsa-malware...

Malicious code in pyrtp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f77b4d5bf456d6805b724bbedc6baa9f7fb3cc95e6ab6aace6861bfcd56aec1f Importing the module starts an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-11-mescouille...

Malicious code in @viapip/eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24a2ddabc23b929acc07d5de338f333eb95ec7682ce84cef2747787ae9e473ec The package @viapip/eslint-config was found to contain malicious code. Source: ghsa-malware...

Malicious code in @trpc-rate-limiter/hono (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86780189d32c5c6215833b83e8ff4274af92653c41f51d8cb8f9c1e5262bccf The package @trpc-rate-limiter/hono was found to contain malicious code. Source: ghsa-malware...

Malicious code in @trpc-rate-limiter/cloudflare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f7b0945d5b218d0b4e212ee38448f7de192939870c55e4ef4edb17bfc318d01 The package @trpc-rate-limiter/cloudflare was found to contain malicious code. Source: ghsa-malware...

Malicious code in @trackstar/test-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f23787bf3317a1d48ff30444e506ed95b1c3242ab8092521a697181c736e960 The package @trackstar/test-package was found to contain malicious code. Source: ghsa-malware...

Malicious code in @trackstar/test-angular-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9717e0da8bd1dc4f77e474bb3c7d75d247373f4b1321c41f90dae817b54690ed The package @trackstar/test-angular-package was found to contain malicious code. Source: ghsa-malware...

Malicious code in @trackstar/react-trackstar-link-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 461a58528df6fa02843e6ddff3edefa762e12d5f5beaa15f3098238118347d6e The package @trackstar/react-trackstar-link-upgrade was found to contain malicious code. Source: ghsa-malware...

Malicious code in @trackstar/react-trackstar-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2647efbf90d62ef589efff5f584440fd036864a85e5895dd1855ae0e641ca86 The package @trackstar/react-trackstar-link was found to contain malicious code. Source: ghsa-malware...

Malicious code in @trackstar/angular-trackstar-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de7a5bb22cafe26b985d8470c0ee240b4b2b201efd50c36c27620ff397d01863 The package @trackstar/angular-trackstar-link was found to contain malicious code. Source: ghsa-malware...

Malicious code in rtcpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 75bd7b21b8b27920b63ff14b07b761f57e72da9866682e4e49bd569e660215fd Importing the module starts an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-11-mescouille...

Malicious code in @sme-ui/aoma-vevasound-metadata-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ced8f74d8984f217db135b6a331c5aeee6463823f29d90c9e15fa6473aa8fd3 The package @sme-ui/aoma-vevasound-metadata-lib was found to contain malicious code. Source: ghsa-malware...

Malicious code in @silgi/permission (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e79c1aefaf6282e92f02a2de0191e6d673a1750c97c6646e377d29f1006321c9 The package @silgi/permission was found to contain malicious code. Source: ghsa-malware...

Malicious code in @silgi/openapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da37d75ae054be71f7d9d4913bf4e5b1c0e7249774278432c33d89d871d99f28 The package @silgi/openapi was found to contain malicious code. Source: ghsa-malware 3c5eda9815ba5af459be6844eab3b3e9f5cb4615e738904bd8214eb62a2c93e7...

Malicious code in @silgi/module-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8dcdf459dd6f30b49693265bec20c40b3a8f9b49a11f1eef906e86ecc5741ad The package @silgi/module-builder was found to contain malicious code. Source: ghsa-malware...

Malicious code in @silgi/graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a0404f9aa498b1721d9dfffbbd0f41cb66d195675fa5a3b9e71fec42153b0e9 The package @silgi/graphql was found to contain malicious code. Source: ghsa-malware 131ca7201ac4ce3abb97a2f5940ad11186f384fb0190ddcaf14d36be20ea0d95...

Malicious code in @silgi/ecosystem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1476f1384de83c5e5ccae6b60fbcf5794fca7387b8904c42125a65fabab6051 The package @silgi/ecosystem was found to contain malicious code. Source: ghsa-malware e05b24c2b8b197e85ebbafbc2eef89e4b3c94f02b7519a3fe93b514a763e05...

Malicious code in rediff-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b40d95d5fff90452e9bba5b17b0ddb9c3842ffcb276e9418428a9b969f60129 The package rediff-viewer was found to contain malicious code. Source: ghsa-malware 3d19e3e0f8fc94b15fad4cfc7a82c6f22f66e111e2ba3c5ce2eaf4acc69e288d...

Malicious code in @silgi/drizzle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c2e7d01c383c77ebeddc3e05fac0d15335e412587dc2581a75f3406fdbf8fa The package @silgi/drizzle was found to contain malicious code. Source: ghsa-malware e8e9c9c9355daf84cb6c98baa093fe99abde3b51f58854ac5d4934752d55a9a3...

Malicious code in @silgi/better-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 528101596869077cdc065844f592e42299e9806c92d2b4f6f145ccd18194fdd5 The package @silgi/better-auth was found to contain malicious code. Source: ghsa-malware...

Malicious code in rediff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c86aaca91ce5f75365f233d2d0448fcfe25ce792ebc203487993fdbed70e5c68 The package rediff was found to contain malicious code. Source: ghsa-malware 6f58213ac5761ffaaca614a73e2f1b9927e9f4b25f9dc8b3f64258411281ce41 Any...

Malicious code in @sameepsi/sor2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c5470b040485c9e91f7985d59bd1b1754daed9d80ab9545426cfcf57d627928 The package @sameepsi/sor2 was found to contain malicious code. Source: ghsa-malware 2d34ad4c15350b1f697d541469fe980138a8d60a6abf768fcc4c6365a9d186d6...

Malicious code in @sameepsi/sor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c938c06786ba13f7feed4114c84d12806a6c7ce595360985be178a8ae4844257 The package @sameepsi/sor was found to contain malicious code. Source: ghsa-malware d04547ce27d4c15e2f969770ddc25732ef8f72d46eb21e8dc06f11fc1dc8eea9...

Malicious code in react-scrambled-text (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3888a54f9c5c14abb5fd0b64ec41778b1bc989da36cd5e48a480514eb81b9e57 The package react-scrambled-text was found to contain malicious code. Source: ghsa-malware...

Malicious code in @quick-start-soft/quick-remove-image-background (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f9fbf3fe9e4ab7de62ad125cf8376c5b6f00b67df5291788b607659981ff021 The package @quick-start-soft/quick-remove-image-background was found to contain malicious code. Source: ghsa-malware...

Malicious code in @quick-start-soft/quick-markdown-translator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dab6051ba6edf09fba5f1e39d726a21545c79da23be96476a602044ec7314eb The package @quick-start-soft/quick-markdown-translator was found to contain malicious code. Source: ghsa-malware...

Malicious code in react-packery-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c9dbf0ac814d8ad3cdd41ff8e2cebc7bf1bef909281eb89d019a8efd626d047 The package react-packery-component was found to contain malicious code. Source: ghsa-malware...

Malicious code in @posthog/rrweb-replay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 084c272e547764a91347a8436855b707a75409f57fde2692078e9edf5d9b703b The package @posthog/rrweb-replay was found to contain malicious code. Source: ghsa-malware...

Malicious code in react-native-jam-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4651dd576f405b8b0d0fd7724638dce527ed7cec18cdfc20e4b49f5cc3f9006d The package react-native-jam-icons was found to contain malicious code. Source: ghsa-malware...

Malicious code in @opentermsarchive/engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b65f79ad38dfbbbddd8ec94c40721b2c951c3bf7c76de5e109d75cd20ab25bd5 The package @opentermsarchive/engine was found to contain malicious code. Source: ghsa-malware...

Malicious code in @oku-ui/use-composable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cab65a88d661d76b82f009862721ca4892e3243b91a6ac493c1f09613cf76955 The package @oku-ui/use-composable was found to contain malicious code. Source: ghsa-malware...

Malicious code in react-favic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d4dec5e8464a990814dd2c35d45401414861dd4b227035ae79998c44b05616 The package react-favic was found to contain malicious code. Source: ghsa-malware 5e2a4037034695d45b3b411d0428a55b22920b26b3d5e73f60ed36e8746e9c42 An...

Malicious code in react-data-to-export (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1955002d61deae12965aabd7f49319a8cd75b916377002d839d153e5fd19d8e6 The package react-data-to-export was found to contain malicious code. Source: ghsa-malware...

Malicious code in @oku-ui/slot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c00107e442d452bcb43403d89ade38e4fb111f1d1624b2dc4d2498df1f9a6ca2 The package @oku-ui/slot was found to contain malicious code. Source: ghsa-malware 2a90589b3706323fe3b284df0f3935425b573427c0e51600a8c59a2fc69a670d A...

Malicious code in @oku-ui/primitives (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48684386017546a6d1cc3afd6317d995fe7edc730db2789b79af9135d8f88191 The package @oku-ui/primitives was found to contain malicious code. Source: ghsa-malware...

Malicious code in @oku-ui/motion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e93c9480f3e0eb944aabc540b3632ec18584ccd90aa5a041c10a5f5b7b2a37a The package @oku-ui/motion was found to contain malicious code. Source: ghsa-malware 8b014f6399b1aca00d79587642fc63ab15d16cb1a2ab7f0bd541da45664d891a...

Malicious code in @oku-ui/label (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26f863ed3157086df61430a6d4939470a4c8cbf6bca6ae11d98f34c0c2547e45 The package @oku-ui/label was found to contain malicious code. Source: ghsa-malware d98465139dc808cd01653e8f2eab11a773fcb7ce4d9e4a339cf0bb8c07c02320...

Malicious code in @oku-ui/focus-scope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b522d408beeb4d64a63002599086596cf35f82c8e022fb27d833b26ebc23d54 The package @oku-ui/focus-scope was found to contain malicious code. Source: ghsa-malware...

Malicious code in puny-req (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b37178e16f3045461008067eca9077a2b41c9c0809b2fd8b3082038a7b74ab3 The package puny-req was found to contain malicious code. Source: ghsa-malware 4ed85c7d479a94c8140d2a0d11769e23097d68af45d550610438f446986c3cbb Any...

Malicious code in pergeltest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30c58cbe926b3e974924e37d17a2a498b8c47ee601e0bdf781d3bd385d27779b The package pergeltest was found to contain malicious code. Source: ghsa-malware 5ffcb1d48425e2a6a81862b0d4f1bd3eaddef69103c0d9949ddbf2d359d2d1f1 Any...

Malicious code in pergel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0beb04dcc264a7b8ea3f1b3c48c402609868184158f6bd8615a1f81fc5a29315 The package pergel was found to contain malicious code. Source: ghsa-malware 013990a2334d492668cc0d60833e3b2a30e9578b49ca1d8a75f904b5c82e1932 Any...

Malicious code in nitroping (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86165e479e72da2f21c50ba49cd2a4f3d8a98ee480a278d84535edb1fcbae3bb The package nitroping was found to contain malicious code. Source: ghsa-malware fa25356fefe208bc6fa7440603458887616c2f422067eff3693805c36f822663 Any...

Malicious code in nitro-kutu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c730e64b459919c937231de7e767a99ceca04f35011b70d3d95c5616092dead The package nitro-kutu was found to contain malicious code. Source: ghsa-malware e49eaa55b0b2cddde2728a2d6cfcc512771af0fa1cf78903a09e11d7b564d972 Any...

Malicious code in nitro-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36ef7661deeec20f2ea8ef1c642811be2a627ee5e8b6a3f51cd61de1e421547b The package nitro-graphql was found to contain malicious code. Source: ghsa-malware a77bf7f130d454574e5e838c6ce7922e015408f32542a4b15e77d26698129fe3...