Malicious Package

Overview react-native-webview-forked is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

EUVD-2026-3258

Malicious code in react-native-webview-forked npm...

Malicious code in react-native-webview-forked (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48574c96ad66df5527d36dccb8f8c425b244bb90c2ac49491618968865ccd7da The package react-native-webview-forked was found to contain malicious code. Source: ghsa-malware...

Cross-site Scripting (XSS)

react-native-webview is vulnerable to cross-site scripting XSS. The vulnerability exists through the lack of policy enforcement that allows cross-origin iframes to execute arbitrary JavaScript in the top-level document. The vulnerability exists on all applications running on systems with an Andro...

GHSA-36J3-XXF7-4PQG Android WebView Universal Cross-site Scripting

A universal cross-site scripting UXSS vulnerability, CVE-2020-6506 https://crbug.com/1083819, has been identified in the Android WebView system component, which allows cross-origin iframes to execute arbitrary JavaScript in the top-level document. This vulnerability affects React Native apps whic...

@ada-support/react-native-sdk (>=0.0.1, <=0.0.8), @adadapted/react-native-sdk (2.0.0) +114 more potentially affected by CVE-2020-6506 via react-native-webview (>=10.1.1, <=10.10.2)

react-native-webview NPM version =10.1.1, =0.0.1, =11.0.0-alpha.0, =1.0.0, =0.2.3, =0.0.1, =1.0.20, =0.2.40, =2.0.0, =0.0.14, =0.17.1-beta, =0.18.5 and more Source cves: CVE-2020-6506 Source advisory: GHSA-36J3-XXF7-4PQG...

Cross-site Scripting (XSS)

Overview react-native-webview is a React Native WebView component for iOS, Android, macOS, and Windows Affected versions of this package are vulnerable to Cross-site Scripting XSS. A universal cross-site scripting UXSS vulnerability has been identified in the Android WebView system component, whi...

@ada-support/react-native-sdk (>=0.0.1, <=0.0.8), @adadapted/react-native-sdk (>=1.0.0, <=2.0.0) +319 more potentially affected by CVE-2020-6506 via react-native-webview (>=2.8.0, <=10.10.2)

react-native-webview NPM version =2.8.0, =0.0.1, =1.0.0, =0.1.0, =5.2.0, =11.0.0-alpha.0, =1.0.0, =0.13.0, =1.0.0, =4.6.201906191752-test, =2.37.1, =0.2.3, =0.2.23 and more Source cves: CVE-2020-6506 Source advisory: MEND:CVE-2020-6506...