@asyncapi/server-api (>=0.16.0 <=0.16.23) potentially affected by unknown CVE via @asyncapi/java-template (=0.2.10)

@asyncapi/java-template NPM version =0.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on @asyncapi/java-template and may be impacted: - @asyncapi/server-api =0.16.0, =0.16.23 Source cves: unknown CVE Source advisory:...

EUVD-2025-198729

Malicious code in @asyncapi/java-template npm...

MAL-2025-190717 Malicious code in @asyncapi/java-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 686b2e4c1fe342d1169679b52ef96ae90aebf27fe6b9d3c84f0f9d252779ae15 The package @asyncapi/java-template was found to contain malicious code. Source: ghsa-malware...

Malicious code in @asyncapi/java-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 686b2e4c1fe342d1169679b52ef96ae90aebf27fe6b9d3c84f0f9d252779ae15 The package @asyncapi/java-template was found to contain malicious code. Source: ghsa-malware...