Malicious code in @voiceflow/pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d83773dcab47d7affa39ddff351187eb072a563a8e3a84ef0d0b525c0f5e0185 The package @voiceflow/pino-pretty was found to contain malicious code. Source: google-open-source-security...

EUVD-2025-199397

Malicious code in @voiceflow/pino-pretty npm...

MAL-2025-191365 Malicious code in @voiceflow/pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d83773dcab47d7affa39ddff351187eb072a563a8e3a84ef0d0b525c0f5e0185 The package @voiceflow/pino-pretty was found to contain malicious code. Source: google-open-source-security...

Malicious code in @postman/pretty-ms (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2d31f7cbd143304b0472244ba5f73daa6e96abbc923b854d2736c5ea7807d16 The package @postman/pretty-ms was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190910 Malicious code in @postman/pretty-ms (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2d31f7cbd143304b0472244ba5f73daa6e96abbc923b854d2736c5ea7807d16 The package @postman/pretty-ms was found to contain malicious code. Source: google-open-source-security...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

@voiceflow/alexa-types (>=1.1.3 <=1.49.0), @voiceflow/api-sdk (>=1.0.0 <=1.31.6) +6 more potentially affected by unknown CVE via @voiceflow/pino-pretty (>=4.3.0 <=4.4.0)

@voiceflow/pino-pretty NPM version =4.3.0, =1.1.3, =1.0.0, =1.0.0, =1.1.0, =1.0.0, =1.4.2, =1.10.2, =1.0.0, =1.17.4 Source cves: unknown CVE Source advisory: SNYK:JS-VOICEFLOWPINOPRETTY-14103427...

Malicious code in pretty-jsonify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 448c877af04a46d01d52e722de63fc0f986a877952bfc332c784d6b054b144ea The package pretty-jsonify was found to contain malicious code. Source: ghsa-malware 649213f861633958745285a1555fc21e61fa6cdc511641465cfa66e4317a7373...

Malicious Package

Overview pretty-jsonify is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2025-197906

Malicious code in pretty-jsonify npm...

MAL-2025-190554 Malicious code in pretty-jsonify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 448c877af04a46d01d52e722de63fc0f986a877952bfc332c784d6b054b144ea The package pretty-jsonify was found to contain malicious code. Source: ghsa-malware 649213f861633958745285a1555fc21e61fa6cdc511641465cfa66e4317a7373...

Malicious code in pino-pretty-radiant-less-loader-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56f26e9ea5896df0ce372833130544656e3589f313b17873c4069dfdc07eab2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176339

Malicious code in slidev-odin-charon-pino-pretty npm...

Malicious code in slidev-odin-charon-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a6f20651e71b9191c950fc2cbdba6720c98b9935f61ba97cc07e440604538e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177173

Malicious code in pino-pretty-ariel-ursa-query npm...

EUVD-2025-177587

Malicious code in nightwatch-server-pino-pretty-cz-conventional-changelog npm...

EUVD-2025-180272

Malicious code in async-dotenv-pino-pretty-odin npm...

Malicious code in bellatrix-command-testcafe-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b703a2d20efa32ac0ae07b76175be8aa18b3f4ebfa944f7d27fafa977a66963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179069

Malicious code in eridanus-rigel-cosmiconfig-pino-pretty npm...

EUVD-2025-177165

Malicious code in pino-pretty-yildun-express-graphql npm...