MAL-2025-31808 Malicious code in react-native-audio-recorder-android (npm)

The package react-native-audio-recorder-android was found to contain malicious code...

MAL-2025-31815 Malicious code in react-native-elemets (npm)

The package react-native-elemets was found to contain malicious code...

MAL-2025-25489 Malicious code in localz-lastmile-react-native-sdk (npm)

The package localz-lastmile-react-native-sdk was found to contain malicious code...

MAL-2025-31828 Malicious code in react-native-save-base64-image (npm)

The package react-native-save-base64-image was found to contain malicious code...

MAL-2025-9267 Malicious code in @react-native-website/update-redirects (npm)

The package @react-native-website/update-redirects was found to contain malicious code...

MAL-2025-31829 Malicious code in react-native-sims (npm)

The package react-native-sims was found to contain malicious code...

MAL-2025-31820 Malicious code in react-native-native-toast (npm)

The package react-native-native-toast was found to contain malicious code...

MAL-2025-31814 Malicious code in react-native-elemens (npm)

The package react-native-elemens was found to contain malicious code...

MAL-2025-31831 Malicious code in react-native-website (npm)

The package react-native-website was found to contain malicious code...

MAL-2025-31817 Malicious code in react-native-lib-teste (npm)

The package react-native-lib-teste was found to contain malicious code...

MAL-2025-31821 Malicious code in react-native-native-toast-library-2022 (npm)

The package react-native-native-toast-library-2022 was found to contain malicious code...

MAL-2025-23031 Malicious code in ihealthlibrary-react-native (npm)

The package ihealthlibrary-react-native was found to contain malicious code...

Malicious code in react-native-kraken-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6dd9f629078cdad7b927b9f85f1d8b3a5d381a6009e08c65eafca6272b20cbf2 The OpenSSF Package Analysis project identified 'react-native-kraken-oauth' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

MAL-2025-6806 Malicious code in react-native-kraken-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6dd9f629078cdad7b927b9f85f1d8b3a5d381a6009e08c65eafca6272b20cbf2 The OpenSSF Package Analysis project identified 'react-native-kraken-oauth' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

CVE-2025-54594

react-native-bottom-tabs is a library of Native Bottom Tabs for React Native. In versions 0.9.2 and below, the github/workflows/release-canary.yml GitHub Actions repository workflow improperly used the pullrequesttarget event trigger, which allowed for untrusted code from a forked pull request to...

CVE-2025-54594

react-native-bottom-tabs is a library of Native Bottom Tabs for React Native. In versions 0.9.2 and below, the github/workflows/release-canary.yml GitHub Actions repository workflow improperly used the pullrequesttarget event trigger, which allowed for untrusted code from a forked pull request to...

react-native-bottom-tabs 安全漏洞

react-native-bottom-tabs is the native bottom tabs of a Callstack Incubator open source. A security vulnerability exists in react-native-bottom-tabs version 0.9.2 and earlier, which stems from the improper use of the pullrequesttarget event trigger in the GitHub Actions workflow, and could lead t...

CVE-2025-54594: Improper Privilege Management

react-native-bottom-tabs is a library of Native Bottom Tabs for React Native. In versions 0.9.2 and below, the github/workflows/release-canary.yml GitHub Actions repository workflow improperly used the pullrequesttarget event trigger, which allowed for untrusted code from a forked pull request to...

CVE-2025-54594 react-native-bottom-tabs: Arbitrary code execution in GitHub Actions canary workflow leads to secret exfiltration

react-native-bottom-tabs is a library of Native Bottom Tabs for React Native. In versions 0.9.2 and below, the github/workflows/release-canary.yml GitHub Actions repository workflow improperly used the pullrequesttarget event trigger, which allowed for untrusted code from a forked pull request to...

CVE-2025-54594 react-native-bottom-tabs: Arbitrary code execution in GitHub Actions canary workflow leads to secret exfiltration

react-native-bottom-tabs is a library of Native Bottom Tabs for React Native. In versions 0.9.2 and below, the github/workflows/release-canary.yml GitHub Actions repository workflow improperly used the pullrequesttarget event trigger, which allowed for untrusted code from a forked pull request to...