EUVD-2025-205794

Malicious code in shopify-app-react-router npm...

Malicious code in shopify-app-react-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d58b68abe183faeee5b24e4b524d982d1c78881c8d0c48dd847411bf8fc087e6 The package shopify-app-react-router was found to contain malicious code. Source: ghsa-malware...

The vulnerability of the Express adapter, the React Router routing library, and the React framework in the Remix framework allows attackers to induce a service failure.

The vulnerability of the Express adapter related to the React Router routing library in the Remix framework is linked to shortcomings in HTTP request handling. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the npm React Router package, related to insufficient handling of exceptional states, allows a violator to trigger a service failure.

The vulnerability of the npm React Router package is related to insufficient handling of exceptional states. Exploiting this vulnerability may allow a remote attacker to cause service failures...

EUVD-2025-199226

Malicious code in okta-react-router-6 npm...

MAL-2025-191137 Malicious code in okta-react-router-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b3641ce0ba5810e0edb58d9251065f65ddf54d4a3fca6ef20f36fa46723b741 The package okta-react-router-6 was found to contain malicious code. Source: ghsa-malware...

Malicious code in airbnb-react-router-legacy-v3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d31fa6c9b6cd0a9e87216ce93110698b49f1fede30d3f090902284a5153613 The package airbnb-react-router-legacy-v3 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190605 Malicious code in airbnb-react-router-legacy-v3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d31fa6c9b6cd0a9e87216ce93110698b49f1fede30d3f090902284a5153613 The package airbnb-react-router-legacy-v3 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190604 Malicious code in airbnb-react-router-legacy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbad26f42924fe90947efc559b87354b3cc495e2aad542844029ebfe7d0ec3d9 The package airbnb-react-router-legacy was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2025-198541

Malicious code in airbnb-react-router-legacy npm...

Malicious code in airbnb-react-router-legacy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbad26f42924fe90947efc559b87354b3cc495e2aad542844029ebfe7d0ec3d9 The package airbnb-react-router-legacy was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2025-37057

Malicious code in react-router-kitt npm...

MAL-2025-49236 Malicious code in react-router-kitt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70858804bdf3ade0cd049df0f4e4e3dd4f20283636236919ad48cc1ef8fa59f1 The package react-router-kitt was found to contain malicious code...

Malicious code in react-router-kitt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70858804bdf3ade0cd049df0f4e4e3dd4f20283636236919ad48cc1ef8fa59f1 The package react-router-kitt was found to contain malicious code...

PT-2025-44571

Name of the Vulnerable Software and Affected Versions React Router versions 7.0.0 through 7.9.3 @remix-run/deno versions prior to 2.17.2 @remix-run/node versions prior to 2.17.2 Description The issue concerns a path traversal flaw in React Router and Remix when using the createFileSessionStorage...

PT-2025-44570

Name of the Vulnerable Software and Affected Versions react-router versions 7.0.0 through 7.8.2 @remix-run/react versions 1.15.0 through 2.17.0 Description A cross-site scripting XSS issue exists in React Router's meta/ APIs in Framework Mode when generating script:ld+json tags. This could allow...

Malicious code in react-router-dom.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a54a5d0a9e2cbf3435d04524f79602d94e2a8b49ce9bf676ef37f23e44f1c28c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-36891

Malicious code in react-router-dom.js npm...

MAL-2025-49091 Malicious code in react-router-dom.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a54a5d0a9e2cbf3435d04524f79602d94e2a8b49ce9bf676ef37f23e44f1c28c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview react-router-html is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...