Malicious code in react-dropzone-v4 (npm)

Source: ossf-package-analysis a198afa2f10e287b1c9d5f196f5ca43288ccf306b9dc753a4d04221c3c91f76b The OpenSSF Package Analysis project identified 'react-dropzone-v4' @ 99.0.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious code in react-dropzone-v4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28267e7286151b52836170e94617afcb3c49d17424f7b7ea9fab480c6e008c7c The package's package.json declares a preinstall lifecycle script that runs automatically on npm install. The script performs an nslookup of...

MAL-2026-17758 Malicious code in react-dropzone-v4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28267e7286151b52836170e94617afcb3c49d17424f7b7ea9fab480c6e008c7c The package's package.json declares a preinstall lifecycle script that runs automatically on npm install. The script performs an nslookup of...