EUVD-2025-199491

Malicious code in @oku-ui/alert-dialog npm...

MAL-2025-191271 Malicious code in @oku-ui/roving-focus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef9c5700b2618856ae03ff24523ae655b9b1014a11d02768b8904387d07da4fc The package @oku-ui/roving-focus was found to contain malicious code. Source: google-open-source-security...

MAL-2025-191265 Malicious code in @oku-ui/presence (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ccfe3cd227dfd52c2a7bb6d2c15fc511a5d1baab2eb3378960905005e421b9a The package @oku-ui/presence was found to contain malicious code. Source: google-open-source-security...

MAL-2025-191280 Malicious code in @oku-ui/toolbar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03a495471a804035cd3e91e35335246931ccea65636ad279226ab2a39b0f1283 The package @oku-ui/toolbar was found to contain malicious code. Source: google-open-source-security...

EUVD-2025-199452

Malicious code in @pergel/module-ui npm...

Malicious code in @oku-ui/dialog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25f15df16cf4e34ba65ddc24116d624b40ec91b0a9d12bacec8f2afd6ea3bc27 The package @oku-ui/dialog was found to contain malicious code. Source: google-open-source-security...

MAL-2025-191253 Malicious code in @oku-ui/collapsible (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3927dbf1a0475d32a8f74937162145265ff8f50b4f0352cf6400bbf9ba4b5dc1 The package @oku-ui/collapsible was found to contain malicious code. Source: google-open-source-security...

MAL-2025-191282 Malicious code in @oku-ui/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e363f9563598ec9e11de3c2f70d1e8f832d7cf86e80fa1ee85b454d7745c662 The package @oku-ui/utils was found to contain malicious code. Source: google-open-source-security...

MAL-2025-191233 Malicious code in @huntersofbook/ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 864ad7e5ee11e8337962d5e5ae089ecddbc48e77c50611aadbdab9feb097edfd The package @huntersofbook/ui was found to contain malicious code. Source: google-open-source-security...

MAL-2025-191277 Malicious code in @oku-ui/toast (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b944224d9a502a3f5bb5f7bfb4530de52ce4ffac6f94c8588fdda2f22563953 The package @oku-ui/toast was found to contain malicious code. Source: google-open-source-security...

MAL-2025-191262 Malicious code in @oku-ui/popover (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b98eecbc4f662192c0aea469b5611692a9f412c082a230adfe80e142c6c0c3b6 The package @oku-ui/popover was found to contain malicious code. Source: google-open-source-security...

MAL-2025-191255 Malicious code in @oku-ui/dialog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25f15df16cf4e34ba65ddc24116d624b40ec91b0a9d12bacec8f2afd6ea3bc27 The package @oku-ui/dialog was found to contain malicious code. Source: google-open-source-security...

MAL-2025-191263 Malicious code in @oku-ui/popper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c757bdb980fe7035718ca706928b603973b5cc84bc5d18fbe3ab776cbd44e149 The package @oku-ui/popper was found to contain malicious code. Source: google-open-source-security...

MAL-2025-191264 Malicious code in @oku-ui/portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0711033d654f75b42d8959721555bcf5aa5fb766ccc12b6e89c56eef0d8cafd The package @oku-ui/portal was found to contain malicious code. Source: google-open-source-security...

EUVD-2025-199462

Malicious code in @oku-ui/toast npm...

EUVD-2025-199485

Malicious code in @oku-ui/collection npm...

MAL-2025-191278 Malicious code in @oku-ui/toggle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0d0819bf4913c5aabf31547b239ee5407c6e581d71ef7d041451c7f162314c1 The package @oku-ui/toggle was found to contain malicious code. Source: google-open-source-security...

MAL-2025-191279 Malicious code in @oku-ui/toggle-group (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb7f999444c4458fefe9d248fe0eaf410814ecbb5343107fe992033a61d184f3 The package @oku-ui/toggle-group was found to contain malicious code. Source: google-open-source-security...

MAL-2025-191295 Malicious code in @posthog/lemon-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bba1e7fb74f376bd3b56d7c910331af7b46fa8c392e697e08f858b837112e061 The package @posthog/lemon-ui was found to contain malicious code. Source: google-open-source-security...

CVE-2025-33203: Server-Side Request Forgery (SSRF)

NVIDIA NeMo Agent Toolkit UI for Web contains a vulnerability in the chat API endpoint where an attacker may cause a Server-Side Request Forgery. A successful exploit of this vulnerability may lead to information disclosure and denial of service...