51 matches found
EUVD-2025-37461
Malicious code in react-ui-animates npm...
Malicious code in react-ui-animates (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faea1c84618f620702405ada06f82a0352d57b6f8544e33b87cde589284b5ef1 The package react-ui-animates was found to contain malicious code. Source: ghsa-malware...
Malicious code in react-ui-toast (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6789082e9bf3c52d9daaa6abb3f09ea5012ad93106de355e66a04ee1be9c6605 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview react-ui-toast is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2025-48321 Malicious code in react-ui-toast (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6789082e9bf3c52d9daaa6abb3f09ea5012ad93106de355e66a04ee1be9c6605 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in react-ui-bootstrap (npm)
The package react-ui-bootstrap was found to contain malicious code...
Malicious code in @zalastax/nolb-react-ui (npm)
The package @zalastax/nolb-react-ui was found to contain malicious code...
MAL-2025-13833 Malicious code in @zalastax/nolb-react-ui (npm)
The package @zalastax/nolb-react-ui was found to contain malicious code...
MAL-2025-21300 Malicious code in generator-react-ui-component (npm)
The package generator-react-ui-component was found to contain malicious code...
Malicious code in generator-react-ui-component (npm)
The package generator-react-ui-component was found to contain malicious code...
MAL-2025-31862 Malicious code in react-ui-bootstrap (npm)
The package react-ui-bootstrap was found to contain malicious code...
Malicious code in @happyfoxinc/react-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d35adaa5c8720836c739e2315328f940d5245dcc4590ffe7ac42b1e465b31388 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-53626 pdfme has Sandbox Escape and Prototype Pollution vulnerabilities in pdfme expression evaluation
pdfme is a TypeScript-based PDF generator and React-based UI. The expression evaluation feature in pdfme 5.2.0 to 5.4.0 contains critical vulnerabilities allowing sandbox escape leading to XSS and prototype pollution attacks. This vulnerability is fixed in 5.4.1...
MAL-2025-4158 Malicious code in @rf-ui-platform/react-ui-components (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in hts-open-dex-react-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 71bfac5a5597cde45524360e887ab5bed0c9e5b8c5337ac9c0728b677529de56 The OpenSSF Package Analysis project identified 'hts-open-dex-react-ui' @ 1.0.0 npm as malicious. It is considered malicious because: - The...
MAL-2024-9860 Malicious code in soc-react-ui (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in soc-react-ui (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3949 Malicious code in wf-dbd-react-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0298d6396635472198baea5a751b125cd374bce845178bac3e4738ec1c2c73ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in wf-dbd-react-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0298d6396635472198baea5a751b125cd374bce845178bac3e4738ec1c2c73ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...