PT-2026-124589

TuxCare rebuilt @babel/plugin-transform-react-jsx to address 1 CVE. Fixed in 7.12.18-tuxcare.1...

PT-2026-124591

TuxCare rebuilt @babel/plugin-transform-react-jsx to address 1 CVE. Fixed in 7.29.0-tuxcare.1...

PT-2026-124593

TuxCare rebuilt @babel/plugin-transform-react-jsx to address 1 CVE. Fixed in 7.29.0-tuxcare.2...

PT-2026-124598

TuxCare rebuilt @babel/plugin-transform-react-jsx to address 1 CVE. Fixed in 7.16.7-tuxcare.3...

PT-2026-124596

TuxCare rebuilt @babel/plugin-transform-react-jsx to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...

PT-2026-124594

TuxCare rebuilt @babel/plugin-transform-react-jsx to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

PT-2026-124595

TuxCare rebuilt @babel/plugin-transform-react-jsx to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

PT-2026-123701

TuxCare rebuilt @babel/plugin-transform-react-jsx to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

@tarojs/rn-runner (>=4.0.0-alpha.0, <=4.1.2-alpha.2), @tarojs/rn-style-transformer (>=4.0.0-alpha.0, <=4.1.2-alpha.2) +2 more potentially affected by CVE-2025-5896 via taro-css-to-react-native (>=4.0.0-alpha.0, <=4.1.2-alpha.2)

taro-css-to-react-native NPM version =4.0.0-alpha.0, =4.0.0-alpha.0, =4.0.0-alpha.0, =4.0.0-alpha.0, =4.0.0-alpha.0, =4.1.2-alpha.2 Source cves: CVE-2025-5896 Source advisory: OSV:GHSA-F5XG-CFPJ-2MW6...

be-iq_shared-styled-components (0.0.26) potentially affected by unknown CVE via plugin-transform-react-jsx (0.0.1-security)

plugin-transform-react-jsx NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on plugin-transform-react-jsx and may be impacted: - be-iqshared-styled-components 0.0.26 Source cves: unknown CVE Source advisory: GHSA-X743-4V5W-FRPJ...

Malware in plugin-transform-react-jsx

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

be-iq_shared-styled-components (0.0.26) potentially affected by unknown CVE via plugin-transform-react-jsx (0.0.1-security)

plugin-transform-react-jsx NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on plugin-transform-react-jsx and may be impacted: - be-iqshared-styled-components 0.0.26 Source cves: unknown CVE Source advisory: OSV:MAL-2022-5373...