19 matches found
CLSA-2026-1792444962 TuxCare security update for @babel/plugin-transform-react-jsx-source (2 CVEs)
TuxCare rebuilt @babel/plugin-transform-react-jsx-source to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...
CLSA-2026-1792444961 TuxCare security update for @babel/plugin-transform-react-jsx-source (1 CVE)
TuxCare rebuilt @babel/plugin-transform-react-jsx-source to address 1 CVE. Fixed in 7.18.9-tuxcare.3...
CLSA-2026-1792444960 TuxCare security update for @babel/plugin-transform-react-jsx-source (2 CVEs)
TuxCare rebuilt @babel/plugin-transform-react-jsx-source to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...
CLSA-2026-1792444953 TuxCare security update for @babel/plugin-transform-react-jsx-source (1 CVE)
TuxCare rebuilt @babel/plugin-transform-react-jsx-source to address 1 CVE. Fixed in 7.25.7-tuxcare.4...
CLSA-2026-1792444949 TuxCare security update for @babel/plugin-transform-react-jsx-source (1 CVE)
TuxCare rebuilt @babel/plugin-transform-react-jsx-source to address 1 CVE. Fixed in 7.16.7-tuxcare.3...
CLSA-2026-1792444948 TuxCare security update for @babel/plugin-transform-react-jsx-source (1 CVE)
TuxCare rebuilt @babel/plugin-transform-react-jsx-source to address 1 CVE. Fixed in 7.21.5-tuxcare.1...
CLSA-2026-1792444946 TuxCare security update for @babel/plugin-transform-react-jsx-source (1 CVE)
TuxCare rebuilt @babel/plugin-transform-react-jsx-source to address 1 CVE. Fixed in 7.21.0-tuxcare.4...
CLSA-2026-1792444947 TuxCare security update for @babel/plugin-transform-react-jsx-source (1 CVE)
TuxCare rebuilt @babel/plugin-transform-react-jsx-source to address 1 CVE. Fixed in 7.29.0-tuxcare.2...
CLSA-2026-1792444944 TuxCare security update for @babel/plugin-transform-react-jsx-source (1 CVE)
TuxCare rebuilt @babel/plugin-transform-react-jsx-source to address 1 CVE. Fixed in 7.29.0-tuxcare.1...
CLSA-2026-1792444943 TuxCare security update for @babel/plugin-transform-react-jsx-source (1 CVE)
TuxCare rebuilt @babel/plugin-transform-react-jsx-source to address 1 CVE. Fixed in 7.18.9-tuxcare.2...
CLSA-2026-1792444945 TuxCare security update for @babel/plugin-transform-react-jsx-source (1 CVE)
TuxCare rebuilt @babel/plugin-transform-react-jsx-source to address 1 CVE. Fixed in 7.12.18-tuxcare.2...
EUVD-2026-81047
@refinedev/inferencer through 7.0.0 fails to escape API field names when interpolating them into generated JSX source code. Attackers controlling the data provider can inject malicious JavaScript through crafted JSON property names that execute in the developer's browser when the Inferencer page...
CVE-2026-92784: Improper Control of Generation of Code
@refinedev/inferencer through 7.0.0 fails to escape API field names when interpolating them into generated JSX source code. Attackers controlling the data provider can inject malicious JavaScript through crafted JSON property names that execute in the developer's browser when the Inferencer page...
PT-2026-94061
Name of the Vulnerable Software and Affected Versions @refinedev/inferencer versions prior to 7.0.1 Description The software fails to escape API field names during their interpolation into generated JSX source code. This allows attackers who control the data provider to inject malicious JavaScrip...
Malware in transform-react-jsx-source
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in transform-react-jsx-source (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd1c3c75a248290b6685831711ef1fa1ec32244ea7ab218a36c42a6b5163e560 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-49050 Malicious code in transform-react-jsx-source (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd1c3c75a248290b6685831711ef1fa1ec32244ea7ab218a36c42a6b5163e560 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview transform-react-jsx-source is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...