Malicious Package

Overview react-dom-helpers is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in react-dom-helpers (npm)

Source: amazon-inspector 2fae606be0dbd7c79552511c2553ec9e1d081df1279f0bc85502a6c08c0f17fb Package name typosquats react-dom. On require'react-dom-helpers/client', client.js decodes a base64-obfuscated Slack bot token and channel ID, enumerates local IPv4 addresses via os.networkInterfaces, fetche...

Malicious code in react-dom-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fae606be0dbd7c79552511c2553ec9e1d081df1279f0bc85502a6c08c0f17fb Package name typosquats react-dom. On require'react-dom-helpers/client', client.js decodes a base64-obfuscated Slack bot token and channel ID,...

MAL-2026-14253 Malicious code in react-dom-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fae606be0dbd7c79552511c2553ec9e1d081df1279f0bc85502a6c08c0f17fb Package name typosquats react-dom. On require'react-dom-helpers/client', client.js decodes a base64-obfuscated Slack bot token and channel ID,...