Malicious code in @voiceflow/git-branch-check (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 374d8cf65cd8bf44935889995a1fe36af800d8f570be40b594fa1b3bca1c184d The package @voiceflow/git-branch-check was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199376

Malicious code in @voiceflow/voiceflow-types npm...

EUVD-2025-199400

Malicious code in @voiceflow/npm-package-json-lint-config npm...

MAL-2025-191356 Malicious code in @voiceflow/natural-language-commander (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcffcb39c546d02117506c26844a1fddcedc61f18cd934b27642817c62189437 The package @voiceflow/natural-language-commander was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191341 Malicious code in @voiceflow/default-prompt-wrappers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d2a9bc13c6f1290b0dbfc2c7047651e8cc2b0d3c2f7e5f323825275a970af42 The package @voiceflow/default-prompt-wrappers was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199382

Malicious code in @voiceflow/tsconfig-paths npm...

Malicious code in @voiceflow/dependency-cruiser-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f310f0649a09ab3e8f8ca155d2067e1f39ad9ac40a987851fd0dd352ffc268fe The package @voiceflow/dependency-cruiser-config was found to contain malicious code. Source: ghsa-malware...

Malicious code in @voiceflow/default-prompt-wrappers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d2a9bc13c6f1290b0dbfc2c7047651e8cc2b0d3c2f7e5f323825275a970af42 The package @voiceflow/default-prompt-wrappers was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199406

Malicious code in @voiceflow/natural-language-commander npm...

EUVD-2025-199385

Malicious code in @voiceflow/stylelint-config npm...

EUVD-2025-199390

Malicious code in @voiceflow/semantic-release-config npm...

MAL-2025-191351 Malicious code in @voiceflow/google-dfes-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04a5078499c9ba131d593044169dbb0a8f814c085d73c4823872c41430f8fad2 The package @voiceflow/google-dfes-types was found to contain malicious code. Source: ghsa-malware...

Malicious code in @voiceflow/anthropic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5894ea8ba7ea0e9636e873dae07eb97fdcf83510f4e7a28b23f1d0b2e0a0afe0 The package @voiceflow/anthropic was found to contain malicious code. Source: google-open-source-security...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...