Malicious code in @patternfly-4/react-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d910906cc783762621ef10ef92572495ce92e5424903edc1245045d2092793f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11221 Malicious code in @patternfly-4/react-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d910906cc783762621ef10ef92572495ce92e5424903edc1245045d2092793f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @patternfly-4/react-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5f54e5643951668f9122f9909e456f67938b47d7ecb0cddf1fde02666a66ddb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11222 Malicious code in @patternfly-4/react-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af8f4323b56b57abb05cba88f31a1c04f8fbe92935757e681460c6d66f032e96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @patternfly-4/quickstarts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad5c84bc12cb0c8215b572e242d8268710430f7bb4c16d7ce4ac25a072cd39e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview @patternfly-4/react-core is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview @patternfly-4/react-table is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview @patternfly-4/react-tokens is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

MAL-2026-11220 Malicious code in @patternfly-4/react-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5f54e5643951668f9122f9909e456f67938b47d7ecb0cddf1fde02666a66ddb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11219 Malicious code in @patternfly-4/quickstarts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad5c84bc12cb0c8215b572e242d8268710430f7bb4c16d7ce4ac25a072cd39e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

angular-chart (0.2.3), bit-c3 (>=0.0.1, <=0.1.3) +4 more potentially affected by CVE-2016-1000240 via c3 (>=0.3.0, <=0.4.10)

c3 NPM version =0.3.0, =0.0.1, =3.1.0, =3.3.1 Source cves: CVE-2016-1000240 Source advisory: MEND:CVE-2016-1000240...

@patternfly/patternfly-doc-core (1.15.1), joist-docs (>=1.267.1, <=1.271.0) potentially affected by CVE-2025-59837 via astro (>=5.13.4, <=5.13.5)

astro NPM version =5.13.4, =1.267.1, =1.271.0 Source cves: CVE-2025-59837 Source advisory: MEND:CVE-2025-59837...

@patternfly/patternfly-doc-core (1.15.1), joist-docs (>=1.267.1, <=1.271.0) potentially affected by CVE-2025-59837 via astro (>=5.13.4, <=5.13.5)

astro NPM version =5.13.4, =1.267.1, =1.271.0 Source cves: CVE-2025-59837 Source advisory: GHSA-QCPR-679Q-RHM2...

@patternfly/patternfly-doc-core (1.15.1), joist-docs (>=1.267.1, <=1.271.0) potentially affected by CVE-2025-59837 via astro (>=5.13.4, <=5.13.5)

astro NPM version =5.13.4, =1.267.1, =1.271.0 Source cves: CVE-2025-59837 Source advisory: OSV:GHSA-QCPR-679Q-RHM2...

Malicious code in patternfly-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb2fd8e936317fc9125f41ad0600e981e709900ce289e48fcd9e323d3a062247 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in patternfly-build

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in patternfly-4

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-2697 Malicious code in patternfly-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb2fd8e936317fc9125f41ad0600e981e709900ce289e48fcd9e323d3a062247 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in patternfly-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 057836fcde782f283efd1e52688d31d8375cd7d963b136908d1457ea24e64193 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2223 Malicious code in patternfly-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 057836fcde782f283efd1e52688d31d8375cd7d963b136908d1457ea24e64193 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...