638 matches found
EUVD-2025-120700
Malicious code in vulcan-eleventy-nextjs-aether npm...
MAL-2025-146847 Malicious code in pulsar-xml-nextjs-eleventy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f0199654cd2a544402f7fa4493d46c06e17e6e76ea2056d0a17ae90f068059f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in pino-meissa-izar-nextjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59f4f35d77fd9a52a0e902f6c0cc3434a805974cf10624cc7cd084a5eecaf839 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120905
Malicious code in upgrade-nextjs-phoebe-node-sass npm...
EUVD-2025-123674
Malicious code in pino-pretty-xerxes-rate-limiter-nextjs npm...
EUVD-2025-115356
Malicious code in child-process-metalsmith-sadr-nextjs npm...
EUVD-2025-120872
Malicious code in ursa-hapi-nextjs-epimetheus npm...
EUVD-2025-114810
Malicious code in csrf-winston-koa-nextjs npm...
EUVD-2025-122946
Malicious code in query-release-it-pulsar-nextjs npm...
MAL-2025-140221 Malicious code in bulma-nextjs-playwright-superagent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 563051be1ab409d07dbe8c4deb9edbe396b53845dc3747bb1007c2a25abb8578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124510
Malicious code in nextjs-carina-pino-algol npm...
Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in node
Summary Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in node Vulnerability Details CVEID:CVE-2021-43803 DESCRIPTION: Next.js is a React framework. In versions of Next.js prior to 12.0.5 or 11.1.3, invalid or malformed URLs could lead to a server crash. In...
Malicious code in uui-nextjs-template (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-48881 Malicious code in uui-nextjs-template (npm)
--- -= Per source details. Do not edit below this line.=-...
Malware in nextjs-edge
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in nextjs-edge (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e760ae97f3946b05b183b7e2d558f757bb3bf66afe4199dc5e2d3b54aa0b5e3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48033 Malicious code in nextjs-edge (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e760ae97f3946b05b183b7e2d558f757bb3bf66afe4199dc5e2d3b54aa0b5e3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-32977
Malicious code in nextjs-edge npm...
Malicious Package
Overview nextjs-edge is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...