Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. The publishing pipeline of this package was compromised as the result of Trivy's GitHub Actions compromise and a malicious versions were released on NPM. They contain malicious code, and its content was NOT yet...

MAL-2026-1931 Malicious code in react-native-country-select (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 769c13bead812dac05aaece43d165b10a7574c48a0a030b703e022325f736380 The package react-native-country-select was found to contain malicious code. Source: ghsa-malware...

@gabriellomba/react-native-international-phone-number (>=0.10.6 <=0.10.8), react-native-international-phone-number (>=0.10.0 <=0.11.9) potentially affected by unknown CVE via react-native-country-select (>=0.2.2 <=0.3.9)

react-native-country-select NPM version =0.2.2, =0.10.6, =0.10.0, =0.11.9 Source cves: unknown CVE Source advisory: OSV:MAL-2026-1931...

Malicious code in react-native-country-select (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 769c13bead812dac05aaece43d165b10a7574c48a0a030b703e022325f736380 The package react-native-country-select was found to contain malicious code. Source: ghsa-malware...

Malicious code in react-native-international-phone-number (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f86d66bcbb0f2abf075d3d4ce6a18c3a8ec1563e35087a9fe409f56f9fb64a9f The package react-native-international-phone-number was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1932 Malicious code in react-native-international-phone-number (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f86d66bcbb0f2abf075d3d4ce6a18c3a8ec1563e35087a9fe409f56f9fb64a9f The package react-native-international-phone-number was found to contain malicious code. Source: ghsa-malware...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 – React2Shell React Server Components / Next...

Malicious code in react-state-optimizer-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 782cd7f3728f924a764bf54c8c73a27b8170cdf85f11902e6d8d806db39fa172 The package react-state-optimizer-core was found to contain malicious code...

MAL-2026-1838 Malicious code in react-router-on-navigation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51cdeb16aaf568ca4d20ada611c1d6ac957f95f244c9f86b0bfcc64bf76253d4 The package react-router-on-navigation was found to contain malicious code...

MAL-2026-1839 Malicious code in react-state-optimizer-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 782cd7f3728f924a764bf54c8c73a27b8170cdf85f11902e6d8d806db39fa172 The package react-state-optimizer-core was found to contain malicious code...

Malicious code in react-router-on-navigation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51cdeb16aaf568ca4d20ada611c1d6ac957f95f244c9f86b0bfcc64bf76253d4 The package react-router-on-navigation was found to contain malicious code...

MAL-2026-1837 Malicious code in react-query-core-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bce94f40a0e1879b184cd9f5abb5f4850d66aa5705b231b41337c2e2e33a3de The package react-query-core-utils was found to contain malicious code...

Malicious code in react-query-core-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bce94f40a0e1879b184cd9f5abb5f4850d66aa5705b231b41337c2e2e33a3de The package react-query-core-utils was found to contain malicious code...

MAL-2026-1836 Malicious code in react-performance-suite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e8467a722c92d3c846a99ea30e0b092dd93fba781c34f93dae9b05582d4475e The package react-performance-suite was found to contain malicious code...

Malicious code in react-performance-suite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e8467a722c92d3c846a99ea30e0b092dd93fba781c34f93dae9b05582d4475e The package react-performance-suite was found to contain malicious code...

Malicious code in react-fast-utilsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95853c89c144cd1630b70c6d2c5e97e8b3cafd6d8ff628b357c80d6a7f8407b5 The package react-fast-utilsa was found to contain malicious code...

MAL-2026-1835 Malicious code in react-fast-utilsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95853c89c144cd1630b70c6d2c5e97e8b3cafd6d8ff628b357c80d6a7f8407b5 The package react-fast-utilsa was found to contain malicious code...

Malicious code in @kui-react/table (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab2473063a85d7353d5d857b5a93b62a0d1d2be81640afc1f8ed809a9382c923 The package @kui-react/table was found to contain malicious code...

MAL-2026-1626 Malicious code in @kui-react/table (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab2473063a85d7353d5d857b5a93b62a0d1d2be81640afc1f8ed809a9382c923 The package @kui-react/table was found to contain malicious code...

MAL-2026-1625 Malicious code in @kui-react/button (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb2774da41feb2f5825c18cb59ff37b64a456fd5770d202cc5542aaaa634f4df The package @kui-react/button was found to contain malicious code...