EUVD-2025-199391

Malicious code in @voiceflow/secrets-provider npm...

MAL-2025-191344 Malicious code in @voiceflow/encryption (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13e58f7cdcdf3b87f5bbf111e42e13a1151626e495e15be73fc579109e397800 The package @voiceflow/encryption was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191395 Malicious code in eslint-config-kinvey-flex-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2a9878339c2f4bb9dd2871f516aa58a93438018366470f0a023f02178420971 The package eslint-config-kinvey-flex-service was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191240 Malicious code in @kvytech/medusa-plugin-promotion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2a466e1f572169367ae23de09311bd07d68a2fb1a6b31c6e3347a8f7305f2e5 The package @kvytech/medusa-plugin-promotion was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191353 Malicious code in @voiceflow/husky-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a4de04a484b7919bb905ccfcc2621196b18f11dc604a7b6e173b531f86c031c The package @voiceflow/husky-config was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191343 Malicious code in @voiceflow/dtos-interact (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da307584309abbc16bc106ef1077c1719a9496cf4d3fac9cd2843fd76e77f8d6 The package @voiceflow/dtos-interact was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191385 Malicious code in @voiceflow/voice-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79c5cf11d531645e24158300a51c4ed8ec4267e9b59051ff7f5266e5cdc593b6 The package @voiceflow/voice-types was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191378 Malicious code in @voiceflow/test-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f63a9f42565b5107e8f6684e1079874b29df133cb9d0bb1f425adf7317a6a50 The package @voiceflow/test-common was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191374 Malicious code in @voiceflow/slate-serializer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb7716bab0bde17a29c041cd61a934d39d4717019743671e8d6164fd166c0bdc The package @voiceflow/slate-serializer was found to contain malicious code. Source: ghsa-malware...

Malicious code in @axinom/mosaic-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7168f2a1e0e25128412330dd5022d955509346523f45c453d18e9205eb38b678 The package @axinom/mosaic-cli was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191184 Malicious code in @alexadark/reusable-functions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40b60eadf9a59b630bca0ffcb8e9f5cec6b410c01cd856384df7caaff08880f9 The package @alexadark/reusable-functions was found to contain malicious code. Source: ghsa-malware...

Malicious code in @alexadark/gatsby-theme-wordpress-blog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 110819ca12a8190932562305cd8ee1c97b0e61434f5e12e238bc9eaa46350de5 The package @alexadark/gatsby-theme-wordpress-blog was found to contain malicious code. Source: ghsa-malware...

Malicious code in @alexadark/amadeus-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77dd4490e1bb80e5b23c2e2181146133e356e9a42967ae02883630c49378fb26 The package @alexadark/amadeus-api was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191449 Malicious code in @accordproject/markdown-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa9047c76812b92b2e951857e7b8b36154b6662c2483ca7528bfa6af593c69c7 The package @accordproject/markdown-cli was found to contain malicious code. Source: ghsa-malware...

Malicious code in @accordproject/concerto-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d208898af793502494e9b8d4eaa5f6964e2ff49ff7fd50ca8dff9e9e40191313 The package @accordproject/concerto-types was found to contain malicious code. Source: ghsa-malware...

Malicious code in @accordproject/concerto-linter-default-ruleset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9f48c313afcaf0a201a7b16889d968e2694c7e3751cc334b257de8f8084d9df The package @accordproject/concerto-linter-default-ruleset was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191173 Malicious code in @accordproject/concerto-linter-default-ruleset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9f48c313afcaf0a201a7b16889d968e2694c7e3751cc334b257de8f8084d9df The package @accordproject/concerto-linter-default-ruleset was found to contain malicious code. Source: ghsa-malware...

Malicious code in @browserbasehq/director-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b86bd8a3bb8b027a0b305fca0e5616b1f8cfee1229e47609ef43a14edb2ad0c6 The package @browserbasehq/director-ai was found to contain malicious code. Source: ghsa-malware...

Malicious code in @commute/market-data-chartjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e906d8b501e2641730640922fb6196f422637e4fa3c7eb6e5823dc3f6301026c The package @commute/market-data-chartjs was found to contain malicious code. Source: ghsa-malware...

Malicious code in @clausehq/flows-step-taskscreateurl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aea06d73112475520b51b21f45ccc22e8ddcf55245e7045f7efcdeefda036595 The package @clausehq/flows-step-taskscreateurl was found to contain malicious code. Source: ghsa-malware...