Lucene search
+L

5 matches found

Github Security Blog
Github Security Blog
•added 2025/12/05 2:52 a.m.•5 views

Malware in react-svg-supporter

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/12/05 2:52 a.m.•18 views

Malicious code in react-svg-supporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf2d6b643ae6f9563baf5e18621fe86ff8f764a2254785e2300c96aa397a0bc The package react-svg-supporter was found to contain malicious code. Source: ghsa-malware...

6.9AI score
SaveExploits0References1
EUVD
EUVD
•added 2025/12/05 2:52 a.m.•20 views

EUVD-2025-201328

Malicious code in react-svg-supporter npm...

6.6AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2025/12/05 2:52 a.m.•14 views

MAL-2025-192314 Malicious code in react-svg-supporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf2d6b643ae6f9563baf5e18621fe86ff8f764a2254785e2300c96aa397a0bc The package react-svg-supporter was found to contain malicious code. Source: ghsa-malware...

6.8AI score
SaveExploits0References1
Snyk
Snyk
•added 2025/11/30 1:14 p.m.•21 views

Malicious Package

Overview react-svg-supporter is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this...

9.8CVSS7.2AI score
SaveExploits0References3
Rows per page
Query Builder