Next.js has Unbounded Memory Consumption via PPR Resume Endpoint

A denial of service vulnerability exists in Next.js versions with Partial Prerendering PPR enabled when running in minimal mode. The PPR resume endpoint accepts unauthenticated POST requests with the Next-Resume: 1 header and processes attacker-controlled postponed state data. Two closely related...

TencentOS Server 3: freeradius (TSSA-2023:0120)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0120 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Malicious code in alvino-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7470dca2cc7bc4be8bc7566325d1b87239b9f538360edcaf28bb4d584cd7e442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-143493

Malicious code in alvino-61 npm...

Malicious code in kentung-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16944b228cc21ad03f29822599ba83cb6f97ec306bf796ad086e38711d6802b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c7b2dc6901b1e52d962b8365ed1c9790c1df7c1acae85f105a0973535af6078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8b8355f1922aaf26fe868fa96b4c3825359674dff160ed7aebcc0ed3b4c4833 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152503 Malicious code in alvira-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f45f2401b3d0887f2a7976a5448e7583d6668ad6185572a3979890c9e5f07e4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152863 Malicious code in aril-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f504665be9a5cf2c037d3bf244b5f6ee04a110fc0b1f9959ebdb7ad6ccffe0c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f504665be9a5cf2c037d3bf244b5f6ee04a110fc0b1f9959ebdb7ad6ccffe0c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3b06d5c029e5e9ad9cbc2307793eea3d9c67c8e3b185781f0e84ad0fe28eca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fcf57026c8819f69df99b8325d82c7cc40db1d3902ffbe72c1395e79930ce92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74666

Malicious code in exuberantwolverinemoccasin-61 npm...

EUVD-2025-74596

Malicious code in greatechidnabeige-61 npm...

EUVD-2025-74275

Malicious code in satisfiedaspivory-61 npm...

EUVD-2025-74396

Malicious code in originalamphibianmoccasin-61 npm...

EUVD-2025-72613

Malicious code in continentalaquamarinecat-61-tisubasah npm...

EUVD-2025-71922

Malicious code in snipesapphire-61 npm...

EUVD-2025-72326

Malicious code in jellyfishblack-61-tisubasah npm...

EUVD-2018-4332

Malware in sbrugna...