Malicious code in @azl-react-components/atoms (npm)

The package @azl-react-components/atoms was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in acme-react-components (npm)

The package acme-react-components was found to contain malicious code...

Malicious code in yarn-design-system-react-components-ce-c (npm)

The package yarn-design-system-react-components-ce-c was found to contain malicious code...

Malicious code in yarn-design-system-react-components (npm)

The package yarn-design-system-react-components was found to contain malicious code...

MAL-2025-9143 Malicious code in @omisepayments/keycloak-react-components (npm)

The package @omisepayments/keycloak-react-components was found to contain malicious code...

MAL-2025-21482 Malicious code in github-react-components (npm)

The package github-react-components was found to contain malicious code...

Malicious code in titan-react-components (npm)

The package titan-react-components was found to contain malicious code...

Malicious code in accounts-react-components (npm)

The package accounts-react-components was found to contain malicious code...

MAL-2025-33960 Malicious code in stats-core-js-react-components (npm)

The package stats-core-js-react-components was found to contain malicious code...

MAL-2025-36970 Malicious code in titan-react-components (npm)

The package titan-react-components was found to contain malicious code...

MAL-2025-40342 Malicious code in yarn-design-system-react-components (npm)

The package yarn-design-system-react-components was found to contain malicious code...

MAL-2025-7107 Malicious code in @azl-react-components/molecules (npm)

The package @azl-react-components/molecules was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malware in safe-react-components

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @takamol/ets-react-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f82dcc5edf4748a4186895186924ee28e0f55fe782fe6b7e4d4f6ffe895195d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @takamol/ets-react-components

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-2293 Malicious code in cfa-react-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis aac7ddc598f480a5c87bd28d65a6fc762b5c9ce46b72934eabe3760b49f11a36 The OpenSSF Package Analysis project identified 'cfa-react-components' @ 2.8.8 npm as malicious. It is considered malicious because: - The packa...

Malicious code in cfa-react-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis aac7ddc598f480a5c87bd28d65a6fc762b5c9ce46b72934eabe3760b49f11a36 The OpenSSF Package Analysis project identified 'cfa-react-components' @ 2.8.8 npm as malicious. It is considered malicious because: - The packa...

Malicious code in safe-react-components (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb053fb51230ded6b594cc92293d5377c31b4b9fd8d47e14e46d824d7e672910 Any computer that has this package install...

MAL-2025-4 Malicious code in safe-react-components (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb053fb51230ded6b594cc92293d5377c31b4b9fd8d47e14e46d824d7e672910 Any computer that has this package install...

Malware in aem-core-react-components

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...