Malicious code in nimbus-aspen-vok697-project (npm)

The package nimbus-aspen-vok697-project was found to contain malicious code...

Malicious code in kite-nimbus-qim719-project (npm)

The package kite-nimbus-qim719-project was found to contain malicious code...

MAL-2025-15863 Malicious code in blossom-nimbus-shv514-project (npm)

The package blossom-nimbus-shv514-project was found to contain malicious code...

MAL-2025-37688 Malicious code in umbrella-nimbus-kes356-project (npm)

The package umbrella-nimbus-kes356-project was found to contain malicious code...

Malicious code in quasar-nimbus-vtq227-project (npm)

The package quasar-nimbus-vtq227-project was found to contain malicious code...

Malicious code in kelp-nimbus-ahk549-project (npm)

The package kelp-nimbus-ahk549-project was found to contain malicious code...

Malicious code in nimbus-honey-hgj663-project (npm)

The package nimbus-honey-hgj663-project was found to contain malicious code...

Malicious code in nimbus-whale-lqk535-project (npm)

The package nimbus-whale-lqk535-project was found to contain malicious code...

Malicious code in ant-nimbus-nhr067-project (npm)

The package ant-nimbus-nhr067-project was found to contain malicious code...

Malicious code in arctic-nimbus-rcn239-project (npm)

The package arctic-nimbus-rcn239-project was found to contain malicious code...

MAL-2025-14795 Malicious code in arctic-nimbus-rcn239-project (npm)

The package arctic-nimbus-rcn239-project was found to contain malicious code...

MAL-2025-24560 Malicious code in kite-nimbus-qim719-project (npm)

The package kite-nimbus-qim719-project was found to contain malicious code...

MAL-2025-27531 Malicious code in nimbus-aspen-vok697-project (npm)

The package nimbus-aspen-vok697-project was found to contain malicious code...

MAL-2025-27538 Malicious code in nimbus-reef-xic924-project (npm)

The package nimbus-reef-xic924-project was found to contain malicious code...

MAL-2025-24394 Malicious code in kelp-nimbus-ahk549-project (npm)

The package kelp-nimbus-ahk549-project was found to contain malicious code...

MAL-2025-27541 Malicious code in nimbus-xerus-mtc994-project (npm)

The package nimbus-xerus-mtc994-project was found to contain malicious code...

MAL-2025-31068 Malicious code in quagmire-nimbus-rhb531-project (npm)

The package quagmire-nimbus-rhb531-project was found to contain malicious code...

MAL-2025-27536 Malicious code in nimbus-kiwi-wqj043-project (npm)

The package nimbus-kiwi-wqj043-project was found to contain malicious code...

Security Bulletin: IBM Engineering Lifecycle Optimization - Publishing - In Connect2id Nimbus JOSE+JWT, an attacker can cause a denial of service

Summary Connect2id Nimbus-JOSE-JWT is vulnerable to a denial of service, caused by improper validation of user requests by the PasswordBasedDecrypter PBKDF2 component. By sending a specially crafted request using a large JWE p2c header, a remote attacker could exploit this vulnerability to cause ...

com.nimbusds/nimbus-jose-jwt: Uncontrolled recursion in Connect2id Nimbus JOSE + JWT

A denial of service flaw has been discovered in Connect2id Nimbus JOSE + JWT. This issue can allow a remote attacker to cause a denial of service via a deeply nested JSON object supplied in a JWT claim set...