373 matches found
Malicious code in @voiceflow/nestjs-mongodb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2004e6b1248a0973eb52ceacef7b58dbf4de7c31813ea2b67f07e2788ad3205e The package @voiceflow/nestjs-mongodb was found to contain malicious code. Source: ghsa-malware...
Malicious code in @voiceflow/nestjs-timeout (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13d9067ab95136128bf92e8d28b434d340ae4fd7cd2c8e06f3378c71c3f6f2b1 The package @voiceflow/nestjs-timeout was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-199402
Malicious code in @voiceflow/nestjs-redis npm...
EUVD-2025-199403
Malicious code in @voiceflow/nestjs-rate-limit npm...
MAL-2025-191359 Malicious code in @voiceflow/nestjs-rate-limit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a0dac1431983489842c368c5db298d65dc30278340ee47cf01c5fb3fc2f178b The package @voiceflow/nestjs-rate-limit was found to contain malicious code. Source: google-open-source-security...
MAL-2025-191357 Malicious code in @voiceflow/nestjs-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6d3635e3e4ea7fe67bd91fc10dbb52d16b29a74193117747292587c6fd1d5ef The package @voiceflow/nestjs-common was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-199404
Malicious code in @voiceflow/nestjs-mongodb npm...
MAL-2025-191361 Malicious code in @voiceflow/nestjs-timeout (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13d9067ab95136128bf92e8d28b434d340ae4fd7cd2c8e06f3378c71c3f6f2b1 The package @voiceflow/nestjs-timeout was found to contain malicious code. Source: ghsa-malware...
MAL-2025-191358 Malicious code in @voiceflow/nestjs-mongodb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2004e6b1248a0973eb52ceacef7b58dbf4de7c31813ea2b67f07e2788ad3205e The package @voiceflow/nestjs-mongodb was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-199405
Malicious code in @voiceflow/nestjs-common npm...
@asyncapi/cli (>=2.5.0 <=4.1.1), @leandrose/project-documentation (=0.2.0) +2 more potentially affected by unknown CVE via @asyncapi/generator (>=2.11.0 <=2.8.3)
@asyncapi/generator NPM version =2.11.0, =2.5.0, =0.1.0, =0.1.596 - nestjs-asyncapi =2.0.1 Source cves: unknown CVE Source advisory: SNYK:JS-ASYNCAPIGENERATOR-14103255...
@nmime/nestjs-asyncapi (>=2.0.0 <=2.0.7) potentially affected by unknown CVE via @asyncapi/nodejs-ws-template (=0.10.0)
@asyncapi/nodejs-ws-template NPM version =0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on @asyncapi/nodejs-ws-template and may be impacted: - @nmime/nestjs-asyncapi =2.0.0, =2.0.7 Source cves: unknown CVE Source advisory:...
@nmime/nestjs-asyncapi (>=2.0.0 <=2.0.7) potentially affected by unknown CVE via @asyncapi/nodejs-template (=3.0.4)
@asyncapi/nodejs-template NPM version =3.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on @asyncapi/nodejs-template and may be impacted: - @nmime/nestjs-asyncapi =2.0.0, =2.0.7 Source cves: unknown CVE Source advisory:...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
EUVD-2025-177039
Malicious code in process-outercore-nestjs-leda npm...
EUVD-2025-175670
Malicious code in vulcan-nestjs-pm2-biohacking npm...
EUVD-2025-176000
Malicious code in terser-webpack-plugin-nestjs-umbriel-cluster npm...
EUVD-2025-175858
Malicious code in typeorm-nestjs-equinox-europa npm...
Malicious code in biosignature-nestjs-publish-morgan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d5da20f5f3da9d3423c88e9820644cae1a1723c0ef22e66931bde9716ccd67f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...