Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Malicious code in @actbase/react-absolute (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed7fad65f30e84a768e6bfde1db53365d73d067672f3722603eecc021adadadd The package @actbase/react-absolute was found to contain malicious code. Source: ghsa-malware...

@actbase/native (>=0.1.5 <=0.1.31) potentially affected by unknown CVE via @actbase/react-absolute (=0.8.2)

@actbase/react-absolute NPM version =0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on @actbase/react-absolute and may be impacted: - @actbase/native =0.1.5, =0.1.31 Source cves: unknown CVE Source advisory: OSV:MAL-2025-190790...