Malicious Package

Overview epic-react-common is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in epic-react-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60b94ef197699c924d3128263cbe7437ace4318b5dc44b80d8e1a0e5d1fc5946 The package epic-react-common was found to contain malicious code...

EUVD-2025-37112

Malicious code in epic-react-common npm...

MAL-2025-49181 Malicious code in epic-react-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60b94ef197699c924d3128263cbe7437ace4318b5dc44b80d8e1a0e5d1fc5946 The package epic-react-common was found to contain malicious code...

Malicious code in @fandom-frontend/react-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7e9a17e9a163a67c876d4a9937c41e8711d220ae05d890281acec9edbf9986cf The OpenSSF Package Analysis project identified '@fandom-frontend/react-common' @ 100.100.106 npm as malicious. It is considered malicious...

Malicious code in react-common-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f725d89d41b69b32bcff68f5c43863001fe8a47bf052f1efac3808dbd56f85f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11071 Malicious code in react-common-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f725d89d41b69b32bcff68f5c43863001fe8a47bf052f1efac3808dbd56f85f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in react-common-lib

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview prism-subapps-react-common is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if thi...