803 matches found
MAL-2025-191288 Malicious code in @pergel/nuxt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 254d004d3481a4de85486f384ce71966afc1887442207235accfc350ceab39cc The package @pergel/nuxt was found to contain malicious code. Source: google-open-source-security...
MAL-2025-191185 Malicious code in @alexcolls/nuxt-socket.io (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dee0cebdac319dea5d5f8c78c0d15431297789499f8e486729175fffb7c4f91 The package @alexcolls/nuxt-socket.io was found to contain malicious code. Source: ghsa-malware...
MAL-2025-191400 Malicious code in nuxt-keycloak (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbb088ab2b0e4b6991065c6bcdc57302ff545bb3fe2f2a73ec21fafeae1175f8 The package nuxt-keycloak was found to contain malicious code. Source: google-open-source-security...
EUVD-2025-199303
Malicious code in @lui-ui/lui-nuxt npm...
MAL-2025-191243 Malicious code in @lui-ui/lui-nuxt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeaeb0138ac2e77901a8360aeeeec1038e7da06fabc4c4726a6fb2060f8d01b5 The package @lui-ui/lui-nuxt was found to contain malicious code. Source: ghsa-malware 7914345d453dc4753973e462d6f8e4cbd4d25656c98b9a22f073c9fdddb715...
Malicious code in vue-browserupdate-nuxt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b54bd42aca6d571419286ebc95bb3a97c702b62db009f3310494e1d4c8ce081 The package vue-browserupdate-nuxt was found to contain malicious code. Source: ghsa-malware...
MAL-2025-191448 Malicious code in vue-browserupdate-nuxt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b54bd42aca6d571419286ebc95bb3a97c702b62db009f3310494e1d4c8ce081 The package vue-browserupdate-nuxt was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-199240
Malicious code in vue-browserupdate-nuxt npm...
Malicious code in better-auth-nuxt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63a2c1f5ccee32dc0e1c83e0664d434add6b894caa54c57f137fe0367cba558f The package better-auth-nuxt was found to contain malicious code. Source: ghsa-malware 14fe0837bf9131779e90c6a1e8530acbe2d811b2df09dfa25d2d86c5a151c0...
EUVD-2025-199169
Malicious code in better-auth-nuxt npm...
MAL-2025-191073 Malicious code in better-auth-nuxt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63a2c1f5ccee32dc0e1c83e0664d434add6b894caa54c57f137fe0367cba558f The package better-auth-nuxt was found to contain malicious code. Source: ghsa-malware 14fe0837bf9131779e90c6a1e8530acbe2d811b2df09dfa25d2d86c5a151c0...
@sentry/nuxt (>=10.11.0, <=10.26.0), @sentry/sveltekit (>=10.11.0, <=10.26.0) potentially affected by CVE-2025-65944 via @sentry/cloudflare (>=10.11.0, <=10.26.0)
@sentry/cloudflare NPM version =10.11.0, =10.11.0, =10.11.0, =10.26.0 Source cves: CVE-2025-65944 Source advisory: SNYK:JS-SENTRYCLOUDFLARE-14105052...
Insertion of Sensitive Information Into Sent Data
Overview @sentry/nuxt is an Official Sentry SDK for Nuxt EXPERIMENTAL Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the sendDefaultPii configuration option. An attacker can gain access to sensitive HTTP headers, such as authentication...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Malicious code in @posthog/nuxt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 935dd114e6907af472225a5c7fb27bf9f36b83117c1e6355228de6b837a124e2 The package @posthog/nuxt was found to contain malicious code. Source: ghsa-malware e475b17da9cc625eb62906d0f93266f2657035bdf465eda5eb2a958fbbd45357...
EUVD-2025-198784
Malicious code in @posthog/nuxt npm...
MAL-2025-190749 Malicious code in @posthog/nuxt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 935dd114e6907af472225a5c7fb27bf9f36b83117c1e6355228de6b837a124e2 The package @posthog/nuxt was found to contain malicious code. Source: ghsa-malware e475b17da9cc625eb62906d0f93266f2657035bdf465eda5eb2a958fbbd45357...