48 matches found
Malicious Package
Overview @agora-sdk/react-js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2026-6410 Malicious code in @su-doughnym/react-dlb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2269beae8c30caccda966ca3aba35c3eddb4795fba0161045f14758ff150f58b Package self-identifies as a dependency-confusion bug-bounty proof-of-concept and is published at version 99.99.99 to win resolution priority over an...
Malware in ccn-common-react-library
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious Package
Overview @saferpay/react-library is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...
CVE-2026-23864: React and Next.js Denial of Service via Memory Exhaustion
...
EUVD-2026-1839
Malicious code in secguest-react-lib npm...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 Toolkit & Lab Educational Only Lightweight G...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Malware in react-library-setup
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in react-library-setup (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd7f28e9ee69ccd4dc343423efa26fbdc798388c2d4abdb85588cc5a532dd2c3 The package react-library-setup was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190700 Malicious code in react-library-setup (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd7f28e9ee69ccd4dc343423efa26fbdc798388c2d4abdb85588cc5a532dd2c3 The package react-library-setup was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-198654
Malicious code in react-library-setup npm...
MAL-2025-41351 Malicious code in @hpx-core-experiences/react-my-account-payments (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-13753 Malicious code in @zalastax/nolb-react-s (npm)
The package @zalastax/nolb-react-s was found to contain malicious code...
MAL-2025-13789 Malicious code in @zalastax/nolb-react-su (npm)
The package @zalastax/nolb-react-su was found to contain malicious code...
MAL-2025-13699 Malicious code in @zalastax/nolb-react-ir (npm)
The package @zalastax/nolb-react-ir was found to contain malicious code...
MAL-2025-13694 Malicious code in @zalastax/nolb-react-il (npm)
The package @zalastax/nolb-react-il was found to contain malicious code...
MAL-2025-13762 Malicious code in @zalastax/nolb-react-sg (npm)
The package @zalastax/nolb-react-sg was found to contain malicious code...