MAL-2025-145408 Malicious code in nextjs-adonis-kastra-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec12e9d021d38f1396774e15aed3fc937841fe74ebd34c63516944c0f9a23f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141191 Malicious code in cosmiconfig-nextjs-tailwindcss-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cb61a59a4c5387bf62fb5b1b0c1e546a26f65fc5263ca200c39bad00b2c76c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146417 Malicious code in postcss-neptune-ursa-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cb77aec177aa08941fff2e38a90f659895d77f4a2d68453f8a9c1bf244d1376 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149680 Malicious code in xenos-halley-nextjs-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ea90a89f7e2f9754822f85568e845254ae760b8796313aa877aac600d48ae5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145736 Malicious code in oauth-nextjs-winston-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f33e356c375a07eb1114356bc140ade2d78b93ddd6e18f333b96d5d5ba5afee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124890

Malicious code in miranda-dactyl-nextjs-commitlint npm...

EUVD-2025-124757

Malicious code in mongoose-nextjs-tailwindcss-xml npm...

EUVD-2025-120700

Malicious code in vulcan-eleventy-nextjs-aether npm...

Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in node

Summary Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in node Vulnerability Details CVEID:CVE-2021-43803 DESCRIPTION: Next.js is a React framework. In versions of Next.js prior to 12.0.5 or 11.1.3, invalid or malformed URLs could lead to a server crash. In...

Malicious code in uui-nextjs-template (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-48881 Malicious code in uui-nextjs-template (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in nextjs-edge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e760ae97f3946b05b183b7e2d558f757bb3bf66afe4199dc5e2d3b54aa0b5e3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-32977

Malicious code in nextjs-edge npm...

MAL-2025-48033 Malicious code in nextjs-edge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e760ae97f3946b05b183b7e2d558f757bb3bf66afe4199dc5e2d3b54aa0b5e3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in nextjs-edge

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview nextjs-edge is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

EUVD-2025-12633

Malicious code in bioql PyPI...

EUVD-2025-16914

Malicious code in bioql PyPI...

Malicious code in sha256-validation-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3290610bb31bf5689be7241b664ae5eb52b47b834fff3e2597c5ab75d88c4bec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in sha256-validation-nextjs

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...