Malicious code in react-dom-v18 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1809 Malicious code in explat-client-react-helpers (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @kone-ds/webcomponents-react (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1692 Malicious code in @kone-ds/webcomponents-react (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1667 Malicious code in react-native-survicate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bc16cb68d62d1ff95179e3f34e2afa8a62648c8cf9a10e9de12a9d1ec4e4abe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-native-windows-repo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c894e9ec1df07b7a9631c7a3fff0940b131f370c1e5c3d1846b7ff2398076e59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1663 Malicious code in react-native-windows-repo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c894e9ec1df07b7a9631c7a3fff0940b131f370c1e5c3d1846b7ff2398076e59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-component-usage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02edaef58fe9d6ea792eb3739c512482637fea90b44a07700f89233420a331f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1649 Malicious code in react-component-usage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02edaef58fe9d6ea792eb3739c512482637fea90b44a07700f89233420a331f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pp-react-content-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8280f253e75704177d57797625fe0d81836b0ae85c09ebbc58cdbec1b2a5b4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1621 Malicious code in pp-react-content-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8280f253e75704177d57797625fe0d81836b0ae85c09ebbc58cdbec1b2a5b4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1623 Malicious code in react-content-loader-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29f4fac1cd9b3669fd66345e097ee2be915ef08de77e2fe1a0473640df479d33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-content-loader-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29f4fac1cd9b3669fd66345e097ee2be915ef08de77e2fe1a0473640df479d33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-native-wallet-sdk-demo-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca22a1a9bdc58e35b912072adf9e4737394ce3c10cbad067352953e093610bc3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1559 Malicious code in react-native-wallet-sdk-demo-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca22a1a9bdc58e35b912072adf9e4737394ce3c10cbad067352953e093610bc3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1525 Malicious code in metamask-sdk-create-react-app (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed98a81fafea025740493667412dfaf8dd28cd12988fabdf1118a1765a12733d Any computer that has this package install...

Malicious code in react-native-android-library-simpl-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4460dc946645a2b0bcd6489a7ae7a24c7c2803c369d27f2efa3de46ab7735558 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-spectrum-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c3d2f67a738249f4e3344635d91861eb0b4932967a2d5d72b90fd9b7bad665fb The OpenSSF Package Analysis project identified 'react-spectrum-monorepo' @ 3.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2025-1468 Malicious code in react-spectrum-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c3d2f67a738249f4e3344635d91861eb0b4932967a2d5d72b90fd9b7bad665fb The OpenSSF Package Analysis project identified 'react-spectrum-monorepo' @ 3.0.0 npm as malicious. It is considered malicious because: - The...

CVE-2024-12629

In Progress® Telerik® KendoReact versions v3.5.0 through v9.4.0, an attacker can introduce or modify properties within the global prototype chain which can result in denial of service or command injection...