EUVD-2025-199108

Malicious code in react-data-to-export npm...

Malicious code in react-data-to-export (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1955002d61deae12965aabd7f49319a8cd75b916377002d839d153e5fd19d8e6 The package react-data-to-export was found to contain malicious code. Source: ghsa-malware...

Malicious code in @tiaanduplessis/react-progressbar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c18eaaf382ded7fad4b78f8d9f3a489ac24d4482bdb989fe5dabea0e17c36902 The package @tiaanduplessis/react-progressbar was found to contain malicious code. Source: ghsa-malware...

@lessondesk/schoolbus (>=3.0.43 <=5.2.1) potentially affected by unknown CVE via @tiaanduplessis/react-progressbar (=1.0.0)

@tiaanduplessis/react-progressbar NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @tiaanduplessis/react-progressbar and may be impacted: - @lessondesk/schoolbus =3.0.43, =5.2.1 Source cves: unknown CVE Source advisory:...

EUVD-2025-199130

Malicious code in @tiaanduplessis/react-progressbar npm...

MAL-2025-191057 Malicious code in @tiaanduplessis/react-progressbar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c18eaaf382ded7fad4b78f8d9f3a489ac24d4482bdb989fe5dabea0e17c36902 The package @tiaanduplessis/react-progressbar was found to contain malicious code. Source: ghsa-malware...

react-native-modest-storage (=2.0.0) potentially affected by unknown CVE via @tiaanduplessis/json (=2.0.1)

@tiaanduplessis/json NPM version =2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @tiaanduplessis/json and may be impacted: - react-native-modest-storage =2.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-191056...

MAL-2025-191031 Malicious code in @lessondesk/react-table-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20317dcad4fb59dc30bb24ed5e1305a81ca00e753ffb0432f71dd107636d0516 The package @lessondesk/react-table-context was found to contain malicious code. Source: ghsa-malware...

Malicious code in @lessondesk/react-table-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20317dcad4fb59dc30bb24ed5e1305a81ca00e753ffb0432f71dd107636d0516 The package @lessondesk/react-table-context was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199174

Malicious code in @lessondesk/react-table-context npm...

wao-react-shared-components (>=1.11.0 <=1.11.37) potentially affected by unknown CVE via formik-error-focus (=2.0.0)

formik-error-focus NPM version =2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on formik-error-focus and may be impacted: - wao-react-shared-components =1.11.0, =1.11.37 Source cves: unknown CVE Source advisory: OSV:MAL-2025-191096...

Malicious code in okta-react-router-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b3641ce0ba5810e0edb58d9251065f65ddf54d4a3fca6ef20f36fa46723b741 The package okta-react-router-6 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191137 Malicious code in okta-react-router-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b3641ce0ba5810e0edb58d9251065f65ddf54d4a3fca6ef20f36fa46723b741 The package okta-react-router-6 was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199226

Malicious code in okta-react-router-6 npm...

EUVD-2025-199054

Malicious code in react-component-taggers npm...

Malicious code in react-component-taggers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4b49756f82524cc17df7c04f674e36e56cb9c0f20a095b38dc9297e70440d73 The package react-component-taggers was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190989 Malicious code in react-component-taggers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4b49756f82524cc17df7c04f674e36e56cb9c0f20a095b38dc9297e70440d73 The package react-component-taggers was found to contain malicious code. Source: ghsa-malware...

financelabsutilities (>=0.0.8 <=0.0.10) potentially affected by unknown CVE via react-hook-form-persist (=3.0.0)

react-hook-form-persist NPM version =3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on react-hook-form-persist and may be impacted: - financelabsutilities =0.0.8, =0.0.10 Source cves: unknown CVE Source advisory: OSV:MAL-2025-190990...

EUVD-2025-199053

Malicious code in react-hook-form-persist npm...

Malicious code in react-hook-form-persist (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8030e410dc71e9603bb5e1f5ca4c460699bd132a6e5920a1419aedd71ff2c560 The package react-hook-form-persist was found to contain malicious code. Source: ghsa-malware...