Malicious code in @mastra/chroma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a18696e99554013ec1bb0d7a66c97f48ee65edc6cc6f8f2d4f6c9e26d88268fe The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Fedora 43 : golang-github-alecthomas-chroma-2 (2025-cfdd59f20f)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-cfdd59f20f advisory. Rebuilt for CVE-2025-58185 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...