5097 matches found
CVE-2025-11953 Command injection in React Native Community CLI allows remote attackers to perform remote code execution by sending HTTP requests
The Metro Development Server, which is opened by the React Native Community CLI, binds to external interfaces by default. The server exposes an endpoint that is vulnerable to OS command injection. This allows unauthenticated network attackers to send a POST request to the server and run arbitrary...
React Native Community CLI 安全漏洞
React Native Community CLI is an open source command line tool for React Native Community. A security vulnerability exists in the React Native Community CLI, which stems from a default binding to an external interface and an OS command injection vulnerability in the endpoint, which could allow an...
Malicious code in react-ui-animates (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faea1c84618f620702405ada06f82a0352d57b6f8544e33b87cde589284b5ef1 The package react-ui-animates was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-37461
Malicious code in react-ui-animates npm...
MAL-2025-49329 Malicious code in react-ui-animates (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faea1c84618f620702405ada06f82a0352d57b6f8544e33b87cde589284b5ef1 The package react-ui-animates was found to contain malicious code. Source: ghsa-malware...
Malicious code in react-icon-pkg (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d8ba17d7a373063f5a6120fd27a52bb855006bd5f440ee5d2f287cccaeb6bd5 The package react-icon-pkg was found to contain malicious code. Source: ghsa-malware ce6d8c074bdec68ae646e31b821c3896f805e01c46c5464e8db624d09e133205...
Malicious Package
Overview icon-react-fork is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview react-icon-pkg is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
EUVD-2025-37247
Malicious code in icon-react-fork npm...
Malicious code in icon-react-fork (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad97a4843ca8933070ecec7c05bf536be6b6a80d87925026a6b7be938fd264f7 The package icon-react-fork was found to contain malicious code. Source: ghsa-malware 32d3f4313eda9d40aff4d3624d6f7f534df05b45f0f282fab8e0f8211c1a38c...
EUVD-2025-37246
Malicious code in react-icon-pkg npm...
MAL-2025-49261 Malicious code in icon-react-fork (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad97a4843ca8933070ecec7c05bf536be6b6a80d87925026a6b7be938fd264f7 The package icon-react-fork was found to contain malicious code. Source: ghsa-malware 32d3f4313eda9d40aff4d3624d6f7f534df05b45f0f282fab8e0f8211c1a38c...
MAL-2025-49264 Malicious code in react-icon-pkg (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d8ba17d7a373063f5a6120fd27a52bb855006bd5f440ee5d2f287cccaeb6bd5 The package react-icon-pkg was found to contain malicious code. Source: ghsa-malware ce6d8c074bdec68ae646e31b821c3896f805e01c46c5464e8db624d09e133205...
Malicious code in epic-react-testing (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e97bbfa7002afbed785479629e1f7312a30bf41426bd7eae5ae91d7fb7ffefd The package epic-react-testing was found to contain malicious code...
EUVD-2025-37113
Malicious code in epic-react-carousel npm...
Malicious code in epic-react-slick (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a9dc14ed1b6e40e692519b502b125f4ae2e49b5b6666f02051fc5754a1eb016 The package epic-react-slick was found to contain malicious code...
Malicious code in epic-react-test-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b754cb5a234d92fe76a481880c57c66b79992d80ef094a44a8e53c2b6f143edf The package epic-react-test-utils was found to contain malicious code...
Malicious code in epic-fortnite-react (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bd945fe892d9bf48afabd6e04f49c68c332391d1b4e3b3d92acec73b4e6f6da The package epic-fortnite-react was found to contain malicious code...
Malicious code in react-router-kitt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70858804bdf3ade0cd049df0f4e4e3dd4f20283636236919ad48cc1ef8fa59f1 The package react-router-kitt was found to contain malicious code...