Lucene search
+L

4 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/12/05 2:57 a.m.18 views

Malicious code in react-svg-fill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 995c6ef17232fb1949de6b62053246036337cb070a7b06a466bb122d789c9ca3 The package react-svg-fill was found to contain malicious code. Source: ghsa-malware b09c58dca53550942f8c2595496e45d321f85551e7ce7a94e7059e50448f4709...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2025/12/05 2:57 a.m.7 views

MAL-2025-192313 Malicious code in react-svg-fill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 995c6ef17232fb1949de6b62053246036337cb070a7b06a466bb122d789c9ca3 The package react-svg-fill was found to contain malicious code. Source: ghsa-malware b09c58dca53550942f8c2595496e45d321f85551e7ce7a94e7059e50448f4709...

6.8AI score
SaveExploits0References1
EUVD
EUVD
added 2025/12/05 2:57 a.m.7 views

EUVD-2025-201327

Malicious code in react-svg-fill npm...

6.6AI score
SaveExploits0References1
Snyk
Snyk
added 2025/11/30 1:14 p.m.8 views

Malicious Package

Overview react-svg-fill is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this package...

9.8CVSS7.2AI score
SaveExploits0References3
Rows per page
Query Builder