Malicious code in @pergel/nuxt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 254d004d3481a4de85486f384ce71966afc1887442207235accfc350ceab39cc The package @pergel/nuxt was found to contain malicious code. Source: google-open-source-security...

MAL-2025-191288 Malicious code in @pergel/nuxt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 254d004d3481a4de85486f384ce71966afc1887442207235accfc350ceab39cc The package @pergel/nuxt was found to contain malicious code. Source: google-open-source-security...

Malicious code in @alexcolls/nuxt-ux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6d0dc43ee3b9d8d19d3d6a710804c3ea65f07046818a98a58990901d8f88d77 The package @alexcolls/nuxt-ux was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199499

Malicious code in @huntersofbook/core-nuxt npm...

MAL-2025-191243 Malicious code in @lui-ui/lui-nuxt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeaeb0138ac2e77901a8360aeeeec1038e7da06fabc4c4726a6fb2060f8d01b5 The package @lui-ui/lui-nuxt was found to contain malicious code. Source: ghsa-malware 7914345d453dc4753973e462d6f8e4cbd4d25656c98b9a22f073c9fdddb715...

EUVD-2025-199303

Malicious code in @lui-ui/lui-nuxt npm...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

MAL-2025-190749 Malicious code in @posthog/nuxt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 935dd114e6907af472225a5c7fb27bf9f36b83117c1e6355228de6b837a124e2 The package @posthog/nuxt was found to contain malicious code. Source: ghsa-malware e475b17da9cc625eb62906d0f93266f2657035bdf465eda5eb2a958fbbd45357...

EUVD-2025-178010

Malicious code in luminescence-achernar-promise-nuxtjs npm...

MAL-2025-141694 Malicious code in dorado-nuxtjs-procyon-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b925d25988baf7e067d0e986f7a02f01e3109348b252ff402f07ac839ce6c6cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...