153 matches found
Malware in @asyncapi/java-spring-template
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
EUVD-2025-198770
Malicious code in @asyncapi/java-spring-template npm...
Malware in @asyncapi/web-component
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in @asyncapi/web-component (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd2dff5164da9cab0fa9cbd6684d231b19caa4cc57fe660f4d0ad2cd8573dc1a The package @asyncapi/web-component was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-198786
Malicious code in @asyncapi/web-component npm...
MAL-2025-190721 Malicious code in @asyncapi/web-component (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd2dff5164da9cab0fa9cbd6684d231b19caa4cc57fe660f4d0ad2cd8573dc1a The package @asyncapi/web-component was found to contain malicious code. Source: ghsa-malware...
Malware in @asyncapi/markdown-template
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
EUVD-2025-198651
Malicious code in @asyncapi/markdown-template npm...
Malicious code in @asyncapi/markdown-template (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eab3f67164575b589affd305405ab98f13239b541ad15720274e6657e7f6571 The package @asyncapi/markdown-template was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190659 Malicious code in @asyncapi/markdown-template (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eab3f67164575b589affd305405ab98f13239b541ad15720274e6657e7f6571 The package @asyncapi/markdown-template was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-198676
Malicious code in @asyncapi/problem npm...
MAL-2025-190664 Malicious code in @asyncapi/problem (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 257141d8551fbc781c4df287d30e9a7e795f6759382d0ca3c20f7c46411614ec The package @asyncapi/problem was found to contain malicious code. Source: ghsa-malware...
Malware in @asyncapi/problem
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in @asyncapi/generator-helpers
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2025-190657 Malicious code in @asyncapi/generator-helpers (npm)
@asyncapi/generator-helpers version 1.1.1 was published as part of the "Miasma RAT" software supply-chain attack campaign identifier "miasma-train-p1" that compromised several widely used @asyncapi npm packages on 2026-07-14. The malicious code was injected using whitespace hiding: it is appended...
EUVD-2025-198685
Malicious code in @asyncapi/generator-helpers npm...
Malware in @asyncapi/generator-components
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
EUVD-2025-198686
Malicious code in @asyncapi/generator-components npm...
Malware in @asyncapi/modelina-cli
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...