@asyncapi-actions-test/trusted-publishing-test_asyncapi-cli (>=4.1.3 <=5.4.0), @asyncapi/cli (>=1.12.0 <=6.0.2) +2 more potentially affected by unknown CVE via @asyncapi/optimizer (=1.0.4)

@asyncapi/optimizer NPM version =1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on @asyncapi/optimizer and may be impacted: - @asyncapi-actions-test/trusted-publishing-testasyncapi-cli =4.1.3, =1.12.0, =1.4.14, =1.4.50 -...

Malicious code in @asyncapi/optimizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 886928a124b656faf40d1490a3b484cf0aa717d98fa9f5cd6de025e1874183e5 The package @asyncapi/optimizer was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198690

Malicious code in @asyncapi/optimizer npm...

MAL-2025-190663 Malicious code in @asyncapi/optimizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 886928a124b656faf40d1490a3b484cf0aa717d98fa9f5cd6de025e1874183e5 The package @asyncapi/optimizer was found to contain malicious code. Source: ghsa-malware...