Malicious code in itobuz-angular-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afed61db59aa59cee728d1b2cbe413a85ae32a192004efad9e9d126770433bdf The package itobuz-angular-auth was found to contain malicious code. Source: ghsa-malware...

Malicious code in itobuz-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fcdbc14cc1282398d0aa27b0ada7027ef96a6c2b95c3fcb0fefb926cbb45a0e The package itobuz-angular was found to contain malicious code. Source: ghsa-malware 7bb8d54de22fc55a5690d5bf3b51d9847a98a5dcf0d9836311c615cd6a30b2df...

Malicious code in ito-button (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9cf5ba13f206c5d1d757c2cf05286ee560131e1fcb7075df3f36ebb148077f3 The package ito-button was found to contain malicious code. Source: ghsa-malware 03f8f135ee783bb27854daa06728ae760fbffe751ad120740d501a29f4b1a68a Any...

Malicious code in invo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9e4a40c8b32a7c38f435045392647f8c5024b472cd396c5d370f6f90eb37848 The package invo was found to contain malicious code. Source: ghsa-malware 26188e61833b5e2bbf47803695cd609aa04a940cd68950202e5908815871f09f Any...

Malicious code in chicopute (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d495090103e9ff8ca138e9ad2b40556ce900f92d07ac058463eb58f42edacc85 Importing the module starts an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-11-mescouille...

Malicious code in image-to-uri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa7b50ee7112a1f75ce3c55597ff598a36e98882fce34223c7d5bde782c8a27a The package image-to-uri was found to contain malicious code. Source: ghsa-malware 6d3880cd56fca46045266b2fa25b00db141ca4d96a3e52047e6a414a20f349f5 A...

Malicious code in hyperterm-hipster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1d8acfc5a1442200f373aaee149ff592b46d79a7bed57e8ffbc4dfa8ec01d61 The package hyperterm-hipster was found to contain malicious code. Source: ghsa-malware...

Malicious code in aiostreams (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a6bc4c2d12a8ad24e8844bea0287de82e1e6ab24b08fb1f5ac983c0906a655d9 Importing the module starts an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-11-mescouille...

Malicious code in httpness (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60a5f77281deaacd07a99bc027837e6209d439745da0eefd97cf0004830460ea The package httpness was found to contain malicious code. Source: ghsa-malware 3248b6d087323d2da2b969624ae57df331a2fa8f91c973eadd8352ae4116424e Any...

Malicious code in hover-design-prototype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db96c13324b014e92e639e93401c356c60bdd7d020bc22c5327900ccbab0220a The package hover-design-prototype was found to contain malicious code. Source: ghsa-malware...

Malicious code in hopedraw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9b92770a39e89559f4745f8c6d264f55c2f56aa858388f2b23fe19d8ac5cfb7 The package hopedraw was found to contain malicious code. Source: ghsa-malware 5816fd13331bdf9cddedac9d250bbe6f4d28bafe88b9bea201c4f6cbbb1f2448 Any...

Malicious code in hope-mapboxdraw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df66ea17d715faf27f78cc71434fc12bea5684441bf51f652b2ab98a8eb2787 The package hope-mapboxdraw was found to contain malicious code. Source: ghsa-malware b7e22015802e90e30eb1ecbc96b04e60f72c743f0a41567bbf6259b9b375afb...

Malicious code in haufe-axera-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e49957e5f8983a7e16bd6d6377b03e200addbb6bd6dcd834f6370b5fa5f77061 The package haufe-axera-api-client was found to contain malicious code. Source: ghsa-malware...

Malicious code in pico-uid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea7b37b73a502fca8e0834485805f85161a0b6324f046227c52eaf62f81cbe61 The package pico-uid was found to contain malicious code. Source: ghsa-malware 7dfd9eb3d97c6b6064779eb385892814fd6b36cc5292943e4cd81e254668ee79 Any...

Malicious code in pdf-annotation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30a9825714dd4a01b7deb1226158bce68ad4456f16230aed225cb7240d7c4344 The package pdf-annotation was found to contain malicious code. Source: ghsa-malware 955e80d981658c3ea77d6ae52df04c36931e4d9403d1a44976b8222b2aa9c4f4...

Malicious code in parcel-plugin-asset-copier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 344955077c61592ec46c29550b12878886b0b61f3a7c84e050d6d25756f60bf2 The package parcel-plugin-asset-copier was found to contain malicious code. Source: ghsa-malware...

Malicious code in package-tester (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1888e34e329bc0ea8f84900de1b8ac52cf5271deb84547900790be3335b0d3e4 The package package-tester was found to contain malicious code. Source: ghsa-malware 1cd7a624ca6e7cb7928904d72a30bb889766f3c6009a09fb20758a0a29b56255...

Malicious code in orchestrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 732fc5c54ff5b647980dececa3d55359ca48b380f00beb4845ddfbcc9c968af4 The package orchestrix was found to contain malicious code. Source: ghsa-malware 68b12d5467e82141efec319259cd3c7331cd739fef7932534ebdf9692980ab74 Any...

Malicious code in expressos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00b15491f22752406483c69adc357b3b26b2171c2f4022f3fa80a7f6467c637f The package expressos was found to contain malicious code. Source: ghsa-malware f3e7fca844e7e0a9507fed8c21f16f80c2b937fc25740383c8699b34c403c609 Any...

Malicious code in eslint-config-nitpicky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 574a6235abe523aed3a5411fc8472635c6c8d455b973bcb79f3424effe0fd99b The package eslint-config-nitpicky was found to contain malicious code. Source: ghsa-malware...

Malicious code in enforce-branch-name (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b39bd3b9b616432b7d29c60d2da9d425b52f8823742287d8f6c4203319383a The package enforce-branch-name was found to contain malicious code. Source: ghsa-malware...

Malicious code in email-deliverability-tester (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 074d5f649d3b599b504b29b284fa8a5c5a71d305b58d63d38f2ee3c9202eb982 The package email-deliverability-tester was found to contain malicious code. Source: ghsa-malware...

Malicious code in dont-go (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffcbe928d7ee027a099e62084462a380459f221c740f4c9532f368bc7f76d522 The package dont-go was found to contain malicious code. Source: ghsa-malware c0c93e615c56bff106ee80602d26264bb4224ac1cf87e741889b716bc63681aa Any...

Malicious code in docusaurus-plugin-vanilla-extract (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2659e389b89fcdf1fe723b544962764d4f2881cae9694dc4107fbbb4ec077328 The package docusaurus-plugin-vanilla-extract was found to contain malicious code. Source: ghsa-malware...

Malicious code in designstudiouiux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b36c1311e04a95981cee366a30d6aee0dd7f15421166231abbba74f617035927 The package designstudiouiux was found to contain malicious code. Source: ghsa-malware 0fd8a6a7d5cef9c71c739d05d4e75644f2a303bcae6db5f3b32680d2fc5627...

Malicious code in dashboard-empty-state (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b00545cf1acf95f278f2b1fca78d8c3df406a74600585630c0ff6c6c526b53b4 The package dashboard-empty-state was found to contain malicious code. Source: ghsa-malware...

Malicious code in css-dedoupe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7708f95527bfb987e5bf71ee911acffc550f40aff1b046d3249c9504c14fd52f The package css-dedoupe was found to contain malicious code. Source: ghsa-malware 9bad835f3386b87b3ce781849db6a96394982d6a092ee635c731d854493dd197 An...

Malicious code in count-it-down (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a65cd0a9c7d3b948786d786bc11cec79fe7a51f7f32772fc5c9d3b5eccddd07c The package count-it-down was found to contain malicious code. Source: ghsa-malware 937920caed3a381d9132d328f9e829bb31cca34f7711f7bb80dd27b4fa7a4b87...

Malicious code in composite-reducer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eecfe869a6cc75f59e734412ec583d6bb95ddaab6b45c9c22526ba7b556e004 The package composite-reducer was found to contain malicious code. Source: ghsa-malware...

Malicious code in compare-obj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1892ab55a1dcdd44c7f030aef1ae76a865ffffe4b7a0d4a0492696c149db2e4d The package compare-obj was found to contain malicious code. Source: ghsa-malware 3a7310cc13d858af4c2dfc25ec5d42cf6aa52b00dd7fc28ba0ee069a68e7551b An...

Malicious code in colors-regex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84ccf2bd5bd452f49978832d66685075c10f116c9cc007d7d8c31a2e001b3efe The package colors-regex was found to contain malicious code. Source: ghsa-malware 79632b803684fda175b5701ef644e5ef4e7791334d60bf8e8635cdb0f0d01164 A...

Malicious code in coinmarketcap-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cf4ed85361338b02dab2cd93a7a4b750f9831838300ce645886aa8e5ef0fb48 The package coinmarketcap-api was found to contain malicious code. Source: ghsa-malware...

Malicious code in sa-company-registration-number-regex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f15485422c9807206afeb3c43ed1e03d2f2499b0c689d8bf253e663cf72d7fa7 The package sa-company-registration-number-regex was found to contain malicious code. Source: ghsa-malware...

Malicious code in sa-id-gen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df00f4b56b9be72c09e3f99938b4c41900b44a98e65eb46896c30209f7f0810d The package sa-id-gen was found to contain malicious code. Source: ghsa-malware 3f0da651d111107f348b8807e1fabc4c0ad1125e1af1e268745224c9d81c77fc Any...

Malicious code in set-nested-prop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e3ace4ffb79a5de4b7a82ae75ffdcccb6233dce2bfa2a4f32f70a3dc6921a03 The package set-nested-prop was found to contain malicious code. Source: ghsa-malware 35b0b9a8f67ec13668f93a14f45e037dc7cb3c33fa4c688e13b10a3cd2c5d3a...

Malicious code in sort-by-distance (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e18da0b56bd15f23c5f0d3dcb5a2f08b07ee8e495d121029cbeebaf023ce50f The package sort-by-distance was found to contain malicious code. Source: ghsa-malware b5f4152194e53195be1b2e405488269c046c584acfa9cc1f828115c2a1b0b7...

Malicious code in south-african-id-info (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e086352ee820c350aadcfbcb3d69f34586e6a94ec2237005a12cf89a4b6091ba The package south-african-id-info was found to contain malicious code. Source: ghsa-malware...

Malicious code in stat-fns (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5395e07a1f1a743d77d42495c7eaf08cb0ced22a0b0883b53b5adf78beef28a The package stat-fns was found to contain malicious code. Source: ghsa-malware 6c2e197e85b015babcf3a2073e3f76b980a3ae924a49a20d9c1648c610d7d3c0 Any...

Malicious code in stoor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7b7532a301c81deec9ab17a09d1b99034890bb7c52da539cebf9959e067d00b The package stoor was found to contain malicious code. Source: ghsa-malware be82c913cadb695dde12c8181a4caebf5a0ab0fedc2040c8a874418051174e67 Any...

Malicious code in super-commit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c1af7533a4794e88dc233547249b656c3a1fd1a87109827755918da11151fbe The package super-commit was found to contain malicious code. Source: ghsa-malware 4ef89565a74f08dc54807acd41e1218c07d6d9ffdb73411163e95c66ba080e61 A...

Malicious code in svelte-autocomplete-select (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9659f91ce1f699661cdedee2d6691f0a4a515b4941511290b0082e5b662a91ea The package svelte-autocomplete-select was found to contain malicious code. Source: ghsa-malware...

Malicious code in svelte-toasty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd148faed79826bf40f8bee2ac4f3aee5c75ec85e9ca81d1a9ed972db4a17a26 The package svelte-toasty was found to contain malicious code. Source: ghsa-malware 33e60836cd791de23038b867cd4e97fb21298208fc87c6b2096fe0e189d3fc86...

Malicious code in tanstack-shadcn-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd82454ff234aa46b67b1813010ca3e7c45defc2172690c8c94fc74e2e09f6dc The package tanstack-shadcn-table was found to contain malicious code. Source: ghsa-malware...

Malicious code in tcsp-draw-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3aab2e2be47f975ef5d6dcbb26dd22621b6043ca130bcd094aa6524696873a3 The package tcsp-draw-test was found to contain malicious code. Source: ghsa-malware a0c29ab38c3bc97e4948587b9e49496e015ba0ed1f2b292e49fad4a91b6380c2...

Malicious code in tcsp-test-vd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9f8fd99690655a6e155948c83b8baf3c7d03d10aa4adec3a8e87ed21a96921e The package tcsp-test-vd was found to contain malicious code. Source: ghsa-malware bbc33c9b0da4ee5d72787025ea4a8ca6f7c7b140ba2cb7fa40a3cf6703cb61c8 A...

Malicious code in template-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e288aff0b522dd0945eacea1515088bda9c8140d4ae4ad53179f6f343143110 The package template-lib was found to contain malicious code. Source: ghsa-malware 184fda3b914503f8e849b5fa51afd8cea4fd8a88f0b81aeb6b128dac1847fbfa A...

Malicious code in template-micro-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a11182cb9c66d55101737e1db16a1baf528ddd4f3a498c74acfc75da64fd92b5 The package template-micro-service was found to contain malicious code. Source: ghsa-malware...

Malicious code in tenacious-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61051d9fdf4393e5d5b5336a35ce010a5bd613ab5e8c9b1f45c9c3a409f365c5 The package tenacious-fetch was found to contain malicious code. Source: ghsa-malware 0c44fc9d1c7099876e590cd69eb0d5ff3928dcc439cfe74cce255584a3455cf...

Malicious code in tiaan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eec9aed3f08840a4f5787d8e5edb18c097459657ba29ca488daae2047709701 The package tiaan was found to contain malicious code. Source: ghsa-malware 0135c9cc2fe2d3112342fbb4e91dee9f30647a8d8bc93c0453991d8c51f4710e Any...

Malicious code in typefence (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c9ac344bf18963e146d64aec1de72c3db819eb2c4356be7257ef1980555a17f The package typefence was found to contain malicious code. Source: ghsa-malware 28d8025e6d485b7679079ba265b2ed9a28c10029903c94441308121d974cbf18 Any...