Malicious code in orderly-js-sdk-nextjs-template (npm)

The package orderly-js-sdk-nextjs-template was found to contain malicious code...

Malicious code in axios-antimatter-nextjs-leda (npm)

The package axios-antimatter-nextjs-leda was found to contain malicious code...

Malicious code in cluster-nextjs-html-webpack-plugin-scripts (npm)

The package cluster-nextjs-html-webpack-plugin-scripts was found to contain malicious code...

MAL-2025-27411 Malicious code in nextjs-vega-tailwindcss-europa (npm)

The package nextjs-vega-tailwindcss-europa was found to contain malicious code...

Malicious code in nextjs-transform-blazar-procyon (npm)

The package nextjs-transform-blazar-procyon was found to contain malicious code...

Malicious code in nextjs-surya (npm)

The package nextjs-surya was found to contain malicious code...

Malicious code in style-loader-nextjs-css-loader-gemini (npm)

The package style-loader-nextjs-css-loader-gemini was found to contain malicious code...

Malicious code in nextjs-thuban-terraforming-stop (npm)

The package nextjs-thuban-terraforming-stop was found to contain malicious code...

Malicious code in webdriver-manager-plutology-nextjs-dynamo (npm)

The package webdriver-manager-plutology-nextjs-dynamo was found to contain malicious code...

Malicious code in nextjs-cosmos-spinner-auth0 (npm)

The package nextjs-cosmos-spinner-auth0 was found to contain malicious code...

Malicious code in nextjs-default (npm)

The package nextjs-default was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in nextjs-upgrade-pulsar-bunyan (npm)

The package nextjs-upgrade-pulsar-bunyan was found to contain malicious code...

MAL-2025-5938 Malicious code in nextjs-https-supertest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a35ef56ef551d99479645b88944856a3b2453ce3fc35c72feea29d824f261d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nextjs-https-supertest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a35ef56ef551d99479645b88944856a3b2453ce3fc35c72feea29d824f261d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nextjs-package-purify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0991599608fe8c26ceb79529ca2da64d1dff01f67c36d2cccd92ff994f41fb6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5939 Malicious code in nextjs-package-purify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0991599608fe8c26ceb79529ca2da64d1dff01f67c36d2cccd92ff994f41fb6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in nextjs-package-purify

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in nextjs-https-supertest

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

@bentwnghk/chat (>=1.91.2, <=1.91.6), @lobehub/chat (>=1.49.5, <=1.49.12) +1 more potentially affected by CVE-2025-53548 via @clerk/nextjs (>=6.3.1, <=6.17.0)

@clerk/nextjs NPM version =6.3.1, =1.91.2, =1.49.5, =0.17.0-alpha.9, =0.17.3-centauri.0 Source cves: CVE-2025-53548 Source advisory: OSV:GHSA-9MP4-77WG-RWX9...

@bentwnghk/chat (>=1.91.2, <=1.91.6), @lobehub/chat (>=1.49.5, <=1.49.12) +1 more potentially affected by CVE-2025-53548 via @clerk/nextjs (>=6.3.1, <=6.17.0)

@clerk/nextjs NPM version =6.3.1, =1.91.2, =1.49.5, =0.17.0-alpha.9, =0.17.3-centauri.0 Source cves: CVE-2025-53548 Source advisory: GHSA-9MP4-77WG-RWX9...