Malicious code in axle-react-native-common-dependencies (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1793 Malicious code in axle-react-native-app-sync-client (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2941 Malicious code in react-spa (npm)

False positive caused by problematic ingestion. --- -= Per source details. Do not edit below this line.=-...

MAL-2024-2936 Malicious code in react-router-dom (npm)

False positive caused by problematic ingestion. --- -= Per source details. Do not edit below this line.=-...

MAL-2024-2929 Malicious code in react (npm)

False positive caused by problematic ingestion. --- -= Per source details. Do not edit below this line.=-...

MAL-2024-7084 Malicious code in @unifocus/react (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2939 Malicious code in @plangrid-private/react-scripts (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1801 Malicious code in @plangrid-private/babel-preset-react-app (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @hotwire/react-utilities (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2943 Malicious code in @hotwire/react-utilities (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @hotwire/react-me (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2935 Malicious code in @hotwire/react-me (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @ag-grid-react/lib (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in fing-react-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4e606602dc2c4b6d0550d90156a68cf31799054412bac90062d266e5bcad3d76 The OpenSSF Package Analysis project identified 'fing-react-components' @ 1.15.0 npm as malicious. It is considered malicious because: - The...

PT-2024-7453 · Unknown · Matrix-React-Sdk

Name of the Vulnerable Software and Affected Versions: matrix-react-sdk versions 3.18.0 through 3.101.9 Description: The issue is related to insufficient protection of service data, allowing a malicious homeserver to potentially steal message keys for a room when a user invites another user to th...

Invenio-Communities has a Cross-Site Scripting (XSS) vulnerability in React components

Impact We have identified a Cross-Site Scripting XSS vulnerability within certain React components related to community members in the Invenio-Communities module. This vulnerability enables a user to inject a script tag into the Affiliations field during the account registration process. The...

Malicious code in discord-react (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bc34a3a31bb6498c18b917bfd0c3049006f5c630220a45dbef402db8ef290775 The OpenSSF Package Analysis project identified 'discord-react' @ 0.0.0.1 pypi as malicious. It is considered malicious because: - The package...

MAL-2024-9968 Malicious code in discord-react (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bc34a3a31bb6498c18b917bfd0c3049006f5c630220a45dbef402db8ef290775 The OpenSSF Package Analysis project identified 'discord-react' @ 0.0.0.1 pypi as malicious. It is considered malicious because: - The package...

MAL-2024-1380 Malicious code in tcm-app-migration-miles-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9025c83532f86e4420c8cd88f4f408a7857044b1f990a20c9a64fa0cc2ea902f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-34350

CVE-2024-34350 affects Next.js (React framework). The issue arises from inconsistent interpretation of a crafted HTTP request, causing a request to be treated as both a single request and two separate requests, which can poison the response queue. Exploitation requires the affected route to use t...