Malware in @fishingbooker/react-swiper

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

EUVD-2025-199314

Malicious code in @fishingbooker/react-swiper npm...

MAL-2025-191224 Malicious code in @fishingbooker/react-swiper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06f57ab28c32fa764c92d001b6c970f064bf1c5544959b2c677d8ce8f26d3bd5 The package @fishingbooker/react-swiper was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199315

Malicious code in @fishingbooker/react-raty npm...

MAL-2025-191223 Malicious code in @fishingbooker/react-raty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a32900cd2e5c9e243d0183183c4b1e1fcb3b9e834f1bbc4ed5dd92087d73e1 The package @fishingbooker/react-raty was found to contain malicious code. Source: ghsa-malware...

Malware in @fishingbooker/react-raty

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

EUVD-2025-199316

Malicious code in @fishingbooker/react-pagination npm...

Malicious code in @fishingbooker/react-pagination (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d1150699fbdbd82b14aab4463da75ae2d2bb7b4a64d01d48f98bef2f8243715 The package @fishingbooker/react-pagination was found to contain malicious code. Source: ghsa-malware...

Malware in @fishingbooker/react-pagination

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

EUVD-2025-199317

Malicious code in @fishingbooker/react-loader npm...

Malware in @fishingbooker/react-loader

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

EUVD-2025-199318

Malicious code in @fishingbooker/browser-sync-plugin npm...

Malicious code in @fishingbooker/browser-sync-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79d64a6878784c34ef61c163e69714d7ac73721da8790b37ad02be83ec6246af The package @fishingbooker/browser-sync-plugin was found to contain malicious code. Source: ghsa-malware...

Malware in @fishingbooker/browser-sync-plugin

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...