@nmime/nestjs-asyncapi (>=2.0.0 <=2.0.7) potentially affected by unknown CVE via @asyncapi/nodejs-template (=3.0.4)

@asyncapi/nodejs-template NPM version =3.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on @asyncapi/nodejs-template and may be impacted: - @nmime/nestjs-asyncapi =2.0.0, =2.0.7 Source cves: unknown CVE Source advisory:...

@nmime/nestjs-asyncapi (>=2.0.0 <=2.0.7) potentially affected by unknown CVE via @asyncapi/nodejs-template (=3.0.4)

@asyncapi/nodejs-template NPM version =3.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on @asyncapi/nodejs-template and may be impacted: - @nmime/nestjs-asyncapi =2.0.0, =2.0.7 Source cves: unknown CVE Source advisory: OSV:MAL-2025-190718...

MAL-2025-190718 Malicious code in @asyncapi/nodejs-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 882d41f9612d27876945ecf55500df19a306cfac18cf244eb72f05288a51222a The package @asyncapi/nodejs-template was found to contain malicious code. Source: ghsa-malware...

Malicious code in @asyncapi/nodejs-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 882d41f9612d27876945ecf55500df19a306cfac18cf244eb72f05288a51222a The package @asyncapi/nodejs-template was found to contain malicious code. Source: ghsa-malware...