518 matches found
MAL-2025-191243 Malicious code in @lui-ui/lui-nuxt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeaeb0138ac2e77901a8360aeeeec1038e7da06fabc4c4726a6fb2060f8d01b5 The package @lui-ui/lui-nuxt was found to contain malicious code. Source: ghsa-malware 7914345d453dc4753973e462d6f8e4cbd4d25656c98b9a22f073c9fdddb715...
Malicious code in vue-browserupdate-nuxt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b54bd42aca6d571419286ebc95bb3a97c702b62db009f3310494e1d4c8ce081 The package vue-browserupdate-nuxt was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-199240
Malicious code in vue-browserupdate-nuxt npm...
MAL-2025-191448 Malicious code in vue-browserupdate-nuxt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b54bd42aca6d571419286ebc95bb3a97c702b62db009f3310494e1d4c8ce081 The package vue-browserupdate-nuxt was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-199169
Malicious code in better-auth-nuxt npm...
MAL-2025-191073 Malicious code in better-auth-nuxt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63a2c1f5ccee32dc0e1c83e0664d434add6b894caa54c57f137fe0367cba558f The package better-auth-nuxt was found to contain malicious code. Source: ghsa-malware 14fe0837bf9131779e90c6a1e8530acbe2d811b2df09dfa25d2d86c5a151c0...
Malicious code in better-auth-nuxt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63a2c1f5ccee32dc0e1c83e0664d434add6b894caa54c57f137fe0367cba558f The package better-auth-nuxt was found to contain malicious code. Source: ghsa-malware 14fe0837bf9131779e90c6a1e8530acbe2d811b2df09dfa25d2d86c5a151c0...
Insertion of Sensitive Information Into Sent Data
Overview @sentry/nuxt is an Official Sentry SDK for Nuxt EXPERIMENTAL Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the sendDefaultPii configuration option. An attacker can gain access to sensitive HTTP headers, such as authentication...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
EUVD-2025-198784
Malicious code in @posthog/nuxt npm...
Malicious code in @posthog/nuxt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 935dd114e6907af472225a5c7fb27bf9f36b83117c1e6355228de6b837a124e2 The package @posthog/nuxt was found to contain malicious code. Source: ghsa-malware e475b17da9cc625eb62906d0f93266f2657035bdf465eda5eb2a958fbbd45357...
MAL-2025-190749 Malicious code in @posthog/nuxt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 935dd114e6907af472225a5c7fb27bf9f36b83117c1e6355228de6b837a124e2 The package @posthog/nuxt was found to contain malicious code. Source: ghsa-malware e475b17da9cc625eb62906d0f93266f2657035bdf465eda5eb2a958fbbd45357...
EUVD-2025-179790
Malicious code in chakra-ui-standard-nuxtjs-sass-loader npm...
EUVD-2025-176357
Malicious code in sirius-nuxtjs-genomics-hydrogeology npm...
EUVD-2025-178010
Malicious code in luminescence-achernar-promise-nuxtjs npm...
EUVD-2025-178263
Malicious code in joviology-nuxtjs-ursa-lacerta npm...
EUVD-2025-113424
Malicious code in framework-nuxtjs-sedna-build npm...
MAL-2025-141694 Malicious code in dorado-nuxtjs-procyon-iota (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b925d25988baf7e067d0e986f7a02f01e3109348b252ff402f07ac839ce6c6cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...