react-calendar1 (>=0.1.0, <=1.1.4) potentially affected by unknown CVE via react-google-calendar-events (0.0.1-security)

react-google-calendar-events NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on react-google-calendar-events and may be impacted: - react-calendar1 =0.1.0, =1.1.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-31791...

Malicious code in react-google-publisher-tag-v15 (npm)

The package react-google-publisher-tag-v15 was found to contain malicious code...

Malicious code in react-google-calendar-events (npm)

The package react-google-calendar-events was found to contain malicious code...

MAL-2025-31792 Malicious code in react-google-publisher-tag-v15 (npm)

The package react-google-publisher-tag-v15 was found to contain malicious code...