EUVD-2025-24029

Malicious code in bioql PyPI...

EUVD-2025-11979

Malicious code in bioql PyPI...

EUVD-2025-9433

Malicious code in bioql PyPI...

EUVD-2025-11980

Malicious code in bioql PyPI...

Malicious code in react-router-dom-stable (npm)

The package react-router-dom-stable was found to contain malicious code...

Malicious code in react-router-dom-beta (npm)

The package react-router-dom-beta was found to contain malicious code...

MAL-2025-45769 Malicious code in react-router-dom-beta (npm)

The package react-router-dom-beta was found to contain malicious code...

MAL-2025-45768 Malicious code in react-router-beta (npm)

The package react-router-beta was found to contain malicious code...

Malicious code in react-router-beta (npm)

The package react-router-beta was found to contain malicious code...

MAL-2025-45770 Malicious code in react-router-dom-stable (npm)

The package react-router-dom-stable was found to contain malicious code...

Malicious code in react-router-html (npm)

The package react-router-html was found to contain malicious code...

MAL-2025-42065 Malicious code in react-router-html (npm)

The package react-router-html was found to contain malicious code...

Sensitive Information Exposure

@workos-inc/authkit-react-router is vulnerable to Sensitive Information Exposure. The vulnerability is due to authentication artifacts such as sealedSession and accessToken being returned from the authkitLoader and rendered into browser HTML, which allows an attacker to obtain sensitive session...

Malicious code in dvrt-flux-react-router (npm)

The package dvrt-flux-react-router was found to contain malicious code...

MAL-2025-31853 Malicious code in react-router-dom-5 (npm)

The package react-router-dom-5 was found to contain malicious code...

Malicious code in react-router-dom-5 (npm)

The package react-router-dom-5 was found to contain malicious code...

MAL-2025-19005 Malicious code in dvrt-flux-react-router (npm)

The package dvrt-flux-react-router was found to contain malicious code...

CVE-2025-55008

The AuthKit library for React Router 7+ provides helpers for authentication and session management using WorkOS & AuthKit with React Router. In versions 0.6.1 and below, @workos-inc/authkit-react-router exposed sensitive authentication artifacts — specifically sealedSession and accessToken by...

CVE-2025-55008

The AuthKit library for React Router 7+ provides helpers for authentication and session management using WorkOS & AuthKit with React Router. In versions 0.6.1 and below, @workos-inc/authkit-react-router exposed sensitive authentication artifacts — specifically sealedSession and accessToken by...

Information Exposure

Overview @workos-inc/authkit-react-router is an Authentication and session helpers for using WorkOS & AuthKit with React Router 7+ Affected versions of this package are vulnerable to Information Exposure via the accessToken and sealedSession parameters in the authkitLoader function. An attacker c...