EUVD-2025-199517

Malicious code in @actbase/native npm...

Malicious code in @actbase/native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 328d7b0db77bbbc8012f6aee1eec6c2c15d1fec187573be00958308bceaf3b13 The package @actbase/native was found to contain malicious code. Source: ghsa-malware eb78c3f4eb3df2581ae53c6b6c46aa1d14c7a6027fa4f248b1e2b15763763ed...

MAL-2025-191178 Malicious code in @actbase/native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 328d7b0db77bbbc8012f6aee1eec6c2c15d1fec187573be00958308bceaf3b13 The package @actbase/native was found to contain malicious code. Source: ghsa-malware eb78c3f4eb3df2581ae53c6b6c46aa1d14c7a6027fa4f248b1e2b15763763ed...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

@actbase/native (>=0.1.5 <=0.1.31) potentially affected by unknown CVE via @actbase/react-absolute (=0.8.2)

@actbase/react-absolute NPM version =0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on @actbase/react-absolute and may be impacted: - @actbase/native =0.1.5, =0.1.31 Source cves: unknown CVE Source advisory: OSV:MAL-2025-190790...