487 matches found
EUVD-2025-122693
Malicious code in release-it-optimize-css-assets-webpack-plugin-nextjs-development npm...
MAL-2025-144212 Malicious code in kronos-antd-dorado-nextjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b8e09b76536f45aa4ef31616dc333b425d9f61069db20dbe9ec7a8b487ad6fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149869 Malicious code in zenobia-nextjs-despina-prompts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c39b2b8df8c767b81fc7ef59247aa5eb4ec4ed8f9332c752e245b3c566a99aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141191 Malicious code in cosmiconfig-nextjs-tailwindcss-polaris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cb61a59a4c5387bf62fb5b1b0c1e546a26f65fc5263ca200c39bad00b2c76c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145422 Malicious code in nextjs-postcss-galaxy-triton (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5546276d3b6710db29e003e3d35096e0f4ec408654685b966043b94a6f2e55fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116157
Malicious code in bellatrix-nextjs-jupiter-dagda npm...
MAL-2025-140221 Malicious code in bulma-nextjs-playwright-superagent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 563051be1ab409d07dbe8c4deb9edbe396b53845dc3747bb1007c2a25abb8578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in node
Summary Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in node Vulnerability Details CVEID:CVE-2021-43803 DESCRIPTION: Next.js is a React framework. In versions of Next.js prior to 12.0.5 or 11.1.3, invalid or malformed URLs could lead to a server crash. In...
MAL-2025-48881 Malicious code in uui-nextjs-template (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in uui-nextjs-template (npm)
--- -= Per source details. Do not edit below this line.=-...
EUVD-2025-32977
Malicious code in nextjs-edge npm...
Malicious code in nextjs-edge (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e760ae97f3946b05b183b7e2d558f757bb3bf66afe4199dc5e2d3b54aa0b5e3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48033 Malicious code in nextjs-edge (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e760ae97f3946b05b183b7e2d558f757bb3bf66afe4199dc5e2d3b54aa0b5e3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview nextjs-edge is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...
EUVD-2025-12633
Malicious code in bioql PyPI...
EUVD-2025-16914
Malicious code in bioql PyPI...
MAL-2025-47521 Malicious code in sha256-validation-nextjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3290610bb31bf5689be7241b664ae5eb52b47b834fff3e2597c5ab75d88c4bec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in sha256-validation-nextjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3290610bb31bf5689be7241b664ae5eb52b47b834fff3e2597c5ab75d88c4bec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
