MAL-2025-23744 Malicious code in jest-nextjs-wormhole-hadron (npm)

The package jest-nextjs-wormhole-hadron was found to contain malicious code...

MAL-2025-23302 Malicious code in io-nextjs-loopback-blitz (npm)

The package io-nextjs-loopback-blitz was found to contain malicious code...

MAL-2025-27411 Malicious code in nextjs-vega-tailwindcss-europa (npm)

The package nextjs-vega-tailwindcss-europa was found to contain malicious code...

MAL-2025-38994 Malicious code in webdriver-manager-plutology-nextjs-dynamo (npm)

The package webdriver-manager-plutology-nextjs-dynamo was found to contain malicious code...

MAL-2025-27409 Malicious code in nextjs-transform-blazar-procyon (npm)

The package nextjs-transform-blazar-procyon was found to contain malicious code...

MAL-2025-27402 Malicious code in nextjs-default (npm)

The package nextjs-default was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-26870 Malicious code in mui-nextjs-isostasy-loglevel (npm)

The package mui-nextjs-isostasy-loglevel was found to contain malicious code...

MAL-2025-27410 Malicious code in nextjs-upgrade-pulsar-bunyan (npm)

The package nextjs-upgrade-pulsar-bunyan was found to contain malicious code...

MAL-2025-27407 Malicious code in nextjs-surya (npm)

The package nextjs-surya was found to contain malicious code...

Malicious code in nextjs-package-purify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0991599608fe8c26ceb79529ca2da64d1dff01f67c36d2cccd92ff994f41fb6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in nextjs-https-supertest

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in nextjs-package-purify

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in nextjs-https-supertest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a35ef56ef551d99479645b88944856a3b2453ce3fc35c72feea29d824f261d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5939 Malicious code in nextjs-package-purify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0991599608fe8c26ceb79529ca2da64d1dff01f67c36d2cccd92ff994f41fb6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5938 Malicious code in nextjs-https-supertest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a35ef56ef551d99479645b88944856a3b2453ce3fc35c72feea29d824f261d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

@bentwnghk/chat (>=1.91.2, <=1.91.6), @lobehub/chat (>=1.49.5, <=1.49.12) +1 more potentially affected by CVE-2025-53548 via @clerk/nextjs (>=6.3.1, <=6.17.0)

@clerk/nextjs NPM version =6.3.1, =1.91.2, =1.49.5, =0.17.0-alpha.9, =0.17.3-centauri.0 Source cves: CVE-2025-53548 Source advisory: OSV:GHSA-9MP4-77WG-RWX9...

Next.js 环境问题漏洞

Next.js is a React framework open-sourced by Vercel. An environment issue vulnerability exists in Next.js versions prior to 15.3.0 through 15.3.3 and Vercel CLI versions 41.4.1 through 42.2.0, which stems from a cache contamination vulnerability that could result in the return of incorrect conten...

Malicious code in nextjs-babel-toastify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c1eb6ce58e4dc8f8a418262d19e1e72e07fb2892e20e7b7d647ff5a352479ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5569 Malicious code in nextjs-babel-toastify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c1eb6ce58e4dc8f8a418262d19e1e72e07fb2892e20e7b7d647ff5a352479ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in nextjs-babel-toastify

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...