cra-watch

cra-watch Does anything you ship have a known-exploited vul...

sbom-sentinel

sbom-sentinel !CIhttps://github.com/MUGHEESM/sbom-sentine...

Malicious code in devplatform-cra-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23e3df86e82704f0b114e616b4dc7f4acd0e5c377a336a61cb987625a31f3940 On require'devplatform-cra-template', index.js loads bootstrap.js, which selects a per-platform payload path and downloads bytes over HTTPS from one ...

MAL-2026-12706 Malicious code in devplatform-cra-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23e3df86e82704f0b114e616b4dc7f4acd0e5c377a336a61cb987625a31f3940 On require'devplatform-cra-template', index.js loads bootstrap.js, which selects a per-platform payload path and downloads bytes over HTTPS from one ...

React SPA Stack Detection

Identifies standalone React SPAs CRA / Vite / classic and explicitly differentiates them from Next.js so the correct scanner pack can run. !/usr/bin/env python3 -- coding: utf-8 -- """Fingerprint React SPA stacks and distinguish them from Next.js.""" from kittysploit import from...

UBUNTU-CVE-2025-40182

In the Linux kernel, the following vulnerability has been resolved: crypto: skcipher - Fix reqsize handling Commit afddce13ce81d "crypto: api - Add reqsize to cryptoalg" introduced crareqsize field in cryptoalg struct to replace type specific reqsize fields. It looks like this was introduced...

Malicious code in @zalastax/nolb-cra-template-k (npm)

The package @zalastax/nolb-cra-template-k was found to contain malicious code...

Malicious code in @zalastax/nolb-cra (npm)

The package @zalastax/nolb-cra was found to contain malicious code...

Malicious code in @zalastax/nolb-cra-tm (npm)

The package @zalastax/nolb-cra-tm was found to contain malicious code...

MAL-2025-11017 Malicious code in @zalastax/nolb-cra (npm)

The package @zalastax/nolb-cra was found to contain malicious code...

MAL-2025-11019 Malicious code in @zalastax/nolb-cra-template-k (npm)

The package @zalastax/nolb-cra-template-k was found to contain malicious code...

MAL-2025-11020 Malicious code in @zalastax/nolb-cra-template-t (npm)

The package @zalastax/nolb-cra-template-t was found to contain malicious code...

MAL-2025-11021 Malicious code in @zalastax/nolb-cra-tm (npm)

The package @zalastax/nolb-cra-tm was found to contain malicious code...

Malicious code in @zalastax/nolb-cra-f (npm)

The package @zalastax/nolb-cra-f was found to contain malicious code...

MAL-2025-11022 Malicious code in @zalastax/nolb-cra-tr (npm)

The package @zalastax/nolb-cra-tr was found to contain malicious code...

MAL-2025-11018 Malicious code in @zalastax/nolb-cra-f (npm)

The package @zalastax/nolb-cra-f was found to contain malicious code...

Malicious code in @zalastax/nolb-cra-tr (npm)

The package @zalastax/nolb-cra-tr was found to contain malicious code...

Malware in cra-react-router

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-5681 Malicious code in cra-react-router (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b95c7c2198b6267e255cb12eb540477d4e18a5670ea43c3e0554eba957e80cfa Any computer that has this package installed or running should be considered...

Malicious code in cra-react-router (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b95c7c2198b6267e255cb12eb540477d4e18a5670ea43c3e0554eba957e80cfa Any computer that has this package installed or running should be considered...