Malicious code in @crabas0npm/quisquam-nemo-dolorem (npm)

The package @crabas0npm/quisquam-nemo-dolorem was found to contain malicious code...

Malicious code in @erboladaiteas/nemo-deserunt-ipsum (npm)

The package @erboladaiteas/nemo-deserunt-ipsum was found to contain malicious code...

Malicious code in @crabas0npm2/reprehenderit-dolor-nemo (npm)

The package @crabas0npm2/reprehenderit-dolor-nemo was found to contain malicious code...

Malicious code in @taktikangea/blanditiis-nemo (npm)

The package @taktikangea/blanditiis-nemo was found to contain malicious code...

Malicious code in @crabas0npm/rem-atque-nemo (npm)

The package @crabas0npm/rem-atque-nemo was found to contain malicious code...

Malicious code in @crabas0npm/nemo-amet-autem (npm)

The package @crabas0npm/nemo-amet-autem was found to contain malicious code...

Malicious code in @teamteanpm2024/placeat-nemo-rerum (npm)

The package @teamteanpm2024/placeat-nemo-rerum was found to contain malicious code...

MAL-2025-7244 Malicious code in @crabas0npm/dignissimos-inventore-nemo (npm)

The package @crabas0npm/dignissimos-inventore-nemo was found to contain malicious code...

MAL-2025-9640 Malicious code in @waitfortea2024/nemo-nisi-sint (npm)

The package @waitfortea2024/nemo-nisi-sint was found to contain malicious code...

MAL-2025-9403 Malicious code in @taktikangea/blanditiis-nemo (npm)

The package @taktikangea/blanditiis-nemo was found to contain malicious code...

MAL-2025-7714 Malicious code in @crabas0npm2/reprehenderit-dolor-nemo (npm)

The package @crabas0npm2/reprehenderit-dolor-nemo was found to contain malicious code...

MAL-2025-7404 Malicious code in @crabas0npm/nemo-error-dolore (npm)

The package @crabas0npm/nemo-error-dolore was found to contain malicious code...

MAL-2025-7918 Malicious code in @erboladaiteas/recusandae-possimus-blanditiis-nemo (npm)

The package @erboladaiteas/recusandae-possimus-blanditiis-nemo was found to contain malicious code...

MAL-2025-7785 Malicious code in @diotobtea/nemo-nihil-aut (npm)

The package @diotobtea/nemo-nihil-aut was found to contain malicious code...

MAL-2025-7519 Malicious code in @crabas0npm/rem-atque-nemo (npm)

The package @crabas0npm/rem-atque-nemo was found to contain malicious code...

CVE-2025-23304

NVIDIA NeMo library for all platforms contains a vulnerability in the model loading component, where an attacker could cause code injection by loading .nemo files with maliciously crafted metadata. A successful exploit of this vulnerability may lead to remote code execution and data tampering...

CVE-2025-23303

NVIDIA NeMo Framework for all platforms contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering...

CVE-2025-23303

NVIDIA NeMo Framework for all platforms contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering...

CVE-2025-23304

NVIDIA NeMo library for all platforms contains a vulnerability in the model loading component, where an attacker could cause code injection by loading .nemo files with maliciously crafted metadata. A successful exploit of this vulnerability may lead to remote code execution and data tampering...

Deserialization of Untrusted Data

Overview nemo-toolkit is a NeMo - a toolkit for Conversational AI Affected versions of this package are vulnerable to Deserialization of Untrusted Data due to the deserialization of untrusted data. An attacker can execute arbitrary code and tamper with data by providing specially crafted input th...