Malicious code in @teamteanpm2024/nemo-repellendus-alias (npm)

The package @teamteanpm2024/nemo-repellendus-alias was found to contain malicious code...

Malicious code in @teamteanpm2024/debitis-dolores-nemo (npm)

The package @teamteanpm2024/debitis-dolores-nemo was found to contain malicious code...

Malicious code in @crabas0npm/quasi-nemo-error (npm)

The package @crabas0npm/quasi-nemo-error was found to contain malicious code...

MAL-2025-42849 Malicious code in @teamteanpm2024/nemo-repellendus-alias (npm)

The package @teamteanpm2024/nemo-repellendus-alias was found to contain malicious code...

MAL-2025-42751 Malicious code in @teamteanpm2024/debitis-dolores-nemo (npm)

The package @teamteanpm2024/debitis-dolores-nemo was found to contain malicious code...

MAL-2025-42346 Malicious code in @crabas0npm/quasi-nemo-error (npm)

The package @crabas0npm/quasi-nemo-error was found to contain malicious code...

MAL-2025-42552 Malicious code in @hishpr/nemo-sapiente-iusto (npm)

The package @hishpr/nemo-sapiente-iusto was found to contain malicious code...

Malicious code in @kollorg/dicta-itaque-nemo (npm)

The package @kollorg/dicta-itaque-nemo was found to contain malicious code...

Malicious code in @hishpr/nemo-sapiente-iusto (npm)

The package @hishpr/nemo-sapiente-iusto was found to contain malicious code...

Malicious code in @hishpr/ipsam-tempora-nemo (npm)

The package @hishpr/ipsam-tempora-nemo was found to contain malicious code...

MAL-2025-42846 Malicious code in @teamteanpm2024/nemo-amet-consequuntur (npm)

The package @teamteanpm2024/nemo-amet-consequuntur was found to contain malicious code...

MAL-2025-42545 Malicious code in @hishpr/ipsam-tempora-nemo (npm)

The package @hishpr/ipsam-tempora-nemo was found to contain malicious code...

MAL-2025-42625 Malicious code in @kollorg/explicabo-nemo (npm)

The package @kollorg/explicabo-nemo was found to contain malicious code...

CVE-2025-23307

NVIDIA NeMo Curator for all platforms contains a vulnerability where a malicious file created by an attacker could allow code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

CVE-2025-23315

NVIDIA NeMo Framework for all platforms contains a vulnerability in the export and deploy component, where malicious data created by an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information...

Arbitrary Code Injection

Overview nemo-curator is a Scalable Data Preprocessing Tool for Training Large Language Models Affected versions of this package are vulnerable to Arbitrary Code Injection via the processing of malicious files. An attacker can execute arbitrary code, escalate privileges, access sensitive...

CVE-2025-23315

NVIDIA NeMo Framework for all platforms contains a vulnerability in the export and deploy component, where malicious data created by an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information...

CVE-2025-23315

NVIDIA NeMo Framework for all platforms contains a vulnerability in the export and deploy component, where malicious data created by an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information...

CVE-2025-23314

NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP component, where malicious data created by an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and dat...

CVE-2025-23312

NVIDIA NeMo Framework for all platforms contains a vulnerability in the retrieval services component, where malicious data created by an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure...