Prototype Pollution

Overview @alifd/next is an A configurable component library for web built on React. Affected versions of this package are vulnerable to Prototype Pollution due to the ConfigProvider.getContextProps function in components/dialog/index.tsx. An attacker can modify object prototype attributes by...

MAL-2025-25224 Malicious code in lib-react-component-page-notifications (npm)

The package lib-react-component-page-notifications was found to contain malicious code...