MAL-2025-191068 Malicious code in axios-timed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ab662813496549443a6e93b09a2f5fe8268f47117b82805c40b631d7ed3d1f7 The package axios-timed was found to contain malicious code. Source: ghsa-malware 1ffd6b2c5ba321504c3373b543278ee5f5a0f3de43e0c7cca70793a90a7680a8 An...

Malicious code in axios-timed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ab662813496549443a6e93b09a2f5fe8268f47117b82805c40b631d7ed3d1f7 The package axios-timed was found to contain malicious code. Source: ghsa-malware 1ffd6b2c5ba321504c3373b543278ee5f5a0f3de43e0c7cca70793a90a7680a8 An...

EUVD-2025-199187

Malicious code in axios-timed npm...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

trust-my-travel (>=0.1.0 <=0.1.2), zapier-axios (>=0.1.4 <=0.1.8) potentially affected by unknown CVE via axios-timed (=1.0.0)

axios-timed NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on axios-timed and may be impacted: - trust-my-travel =0.1.0, =0.1.4, =0.1.8 Source cves: unknown CVE Source advisory: SNYK:JS-AXIOSTIMED-14103576...