Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Malicious code in @kvytech/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1e27717d96aa14c260a48ca84c38f3f08f6b3352f82cd27b83ac56547c46cc6 The package @kvytech/components was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198783

Malicious code in @kvytech/components npm...

@kvytech/cli (>=0.0.4 <=0.0.6) potentially affected by unknown CVE via @kvytech/components (=0.0.1)

@kvytech/components NPM version =0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @kvytech/components and may be impacted: - @kvytech/cli =0.0.4, =0.0.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-190743...