0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
nuvyra-marketplace-sdk
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting nuvyra-marketplace-sdk, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-15569 | Unknown | Malicious code in nuvyra-marketplace-sdk (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (5db08e65aec25f1dc4fd0c33173154dbd0e6ef6e79aa2f1b7f8b4f8df0b9a3a8) dist/client.js executes initializeProvider() at module top level, so the code runs whenever a consumer require()s or imports this SDK. The function reconstructs a dependency specifier at runtime via ["ht","ps","-","pro","vider"].join("").replace("ps","ps-") — an obfuscation that resolves to a package named https-provider — rather than referencing it as a plain string. Before performing the dynamic import(), the loader checks environment sig |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (5db08e65aec25f1dc4fd0c33173154dbd0e6ef6e79aa2f1b7f8b4f8df0b9a3a8) dist/client.js executes initializeProvider() at module top level, so the code runs whenever a consumer require()s or imports this SDK. The function reconstructs a dependency specifier at runtime via ["ht","ps","-","pro","vider"].join("").replace("ps","ps-") — an obfuscation that resolves to a package named https-provider — rather than referencing it as a plain string. Before performing the dynamic import(), the loader checks environment sig