4882 matches found
Malicious code in eslint-plugin-react-purify (npm)
The package eslint-plugin-react-purify was found to contain malicious code...
Malicious code in react-eslint-type (npm)
The package react-eslint-type was found to contain malicious code...
Malicious code in react-router-html (npm)
The package react-router-html was found to contain malicious code...
MAL-2025-41813 Malicious code in react-media-template-ts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5a2fff48804ddfb5297954a2040eb8f90fd5ca36c31568a46d56d860ecf47148 The OpenSSF Package Analysis project identified 'react-media-template-ts' @ 10.0.1 npm as malicious. It is considered malicious because: - The...
Malicious code in react-media-template-ts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5a2fff48804ddfb5297954a2040eb8f90fd5ca36c31568a46d56d860ecf47148 The OpenSSF Package Analysis project identified 'react-media-template-ts' @ 10.0.1 npm as malicious. It is considered malicious because: - The...
Sensitive Information Exposure
@workos-inc/authkit-react-router is vulnerable to Sensitive Information Exposure. The vulnerability is due to authentication artifacts such as sealedSession and accessToken being returned from the authkitLoader and rendered into browser HTML, which allows an attacker to obtain sensitive session...
Payload 授权问题漏洞
Payload is a Headless CMS and application framework built using TypeScript, Node.js, React, and MongoDB. Payload suffers from an authorization issue vulnerability that stems from SQLite adapters reusing identifiers during account creation, which could lead to a session fixation attack...
Payload 代码问题漏洞
Payload is a Headless CMS and application framework built using TypeScript, Node.js, React, and MongoDB. Payload has a code issue vulnerability that stems from JWT not being invalidated after logout, which could lead to token reuse...
MAL-2025-42129 Malicious code in pp-react-grid (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 71193da54e6cdc258489d02db5987830a3bc147cbf9b43236f5757cab04f9c73 The OpenSSF Package Analysis project identified 'pp-react-grid' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in pp-react-grid (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 71193da54e6cdc258489d02db5987830a3bc147cbf9b43236f5757cab04f9c73 The OpenSSF Package Analysis project identified 'pp-react-grid' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2025-42130 Malicious code in pp-react-icons (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cb754d012bc21065e6e4e5d42668a8b226bb1c18d2f8ef04c9ce6a2a8b9f1c47 The OpenSSF Package Analysis project identified 'pp-react-icons' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...
Malicious code in pp-react-icons (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cb754d012bc21065e6e4e5d42668a8b226bb1c18d2f8ef04c9ce6a2a8b9f1c47 The OpenSSF Package Analysis project identified 'pp-react-icons' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...
Malicious code in onnxruntime-reactnative-example (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-41587 Malicious code in onnxruntime-reactnative-example (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-41295 Malicious code in heft-storybook-react-tutorial (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9aaa15f8740a436b59266355d59bb470dfd605d6260dc307a40ef50e20f65939 The OpenSSF Package Analysis project identified 'heft-storybook-react-tutorial' @ 99.0.9 npm as malicious. It is considered malicious because: -...
Malicious code in heft-storybook-react-tutorial (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9aaa15f8740a436b59266355d59bb470dfd605d6260dc307a40ef50e20f65939 The OpenSSF Package Analysis project identified 'heft-storybook-react-tutorial' @ 99.0.9 npm as malicious. It is considered malicious because: -...
MAL-2025-41405 Malicious code in react-event-tracker1 (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in react-event-tracker1 (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41404 Malicious code in react-event-tracker-dpdpoc (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in react-event-tracker-dpdpoc (npm)
The package communicates with a domain associated with malicious activity...