5654 matches found
MAL-2026-10439 Malicious code in react-hot-svg (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 847fe0ea93982597b0611e6fd23f1b77af40b7162baf338659fbff8deb7fb051 index.js in react-hot-svg 1.1.4 hides both a shell command and a package name as base64 strings named svgValidateKey and svgValidatePattern. When any...
Malicious code in react-next-vite (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 286869faf09aec1d62b472e43a7188a1583c5cf8c999d1fb2e116f0b7f5ba8c6 The package impersonates the pino logger README/badges reference pino; module.exports.pino is the middleware while its name is react-next-vite. When ...
MAL-2026-10207 Malicious code in react-dom-v17 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f55f6e35ab09a2fcd6521dac51aa4baa4cfa726958bc266a0d56fc14de240a29 Package name impersonates the widely-used react-dom package react-dom-v17. package.json declares preinstall: node index.js, which fires automatically...
MAL-2026-10132 Malicious code in react-jsonwebtoken (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b46ca6ae72ce6f079c34ec6d1d1d2be46b36fe429374393f0fe57539fe56ee3 Package name mimics the widely-used 'jsonwebtoken' library and falsely declares 'auth0' as author, while the repository URL points to the unrelated...
Security Bulletin: IBM Transformation Advisor is affected by multiple vulnerabilities found in Java, JavaScript and IBM WebSphere Application Server Liberty
Summary There are multiple vulnerabilities in Java, JavaScript and IBM WebSphere Application Server Liberty used by IBM Transformation Advisor. Vulnerability Details CVEID:CVE-2026-40181 DESCRIPTION: React Router is a router for React. In versions 7.0.0 through 7.14.0 and 6.7.0 through 6.30.3,...
SUSE CVE-2025-61686
React Router is a router for React. In @react-router/node versions 7.0.0 through 7.9.3, @remix-run/deno prior to version 2.17.2, and @remix-run/node prior to version 2.17.2, if createFileSessionStorage is being used from @react-router/node or @remix-run/node/@remix-run/deno in Remix v2 with an...
MAL-2026-7020 Malicious code in react-v17 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73dab7161ffcaee5f943894308dd75428e9081b872daaed7ef50218bf98ad44a Package name 'react-v17' impersonates the legitimate 'react' package. package.json declares a preinstall hook 'node index.js' that auto-executes on n...
Malicious code in airkey-mfa-react (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector addd30fd6d90110d178ea017b2968c6014dab0e8304bdfeb55b13612a75f61da Package auto-executes a preinstall script node test.js on npm install that collects username, hostname, platform, Node version, and CI flag and POSTs...
MAL-2026-6991 Malicious code in airkey-mfa-react (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector addd30fd6d90110d178ea017b2968c6014dab0e8304bdfeb55b13612a75f61da Package auto-executes a preinstall script node test.js on npm install that collects username, hostname, platform, Node version, and CI flag and POSTs...
Exploit for Deserialization of Untrusted Data in Facebook React
explo...
@knocklabs/client (>=0.21.6, <=0.22.1), @knocklabs/expo (>=0.5.0, <=0.6.9) +8 more potentially affected by CVE-2026-56812 via phoenix (>=1.8.0, <=1.8.7)
phoenix NPM version =1.8.0, =0.21.6, =0.5.0, =0.11.0, =0.13.0, =0.8.0, =0.0.2, =0.0.1, =0.0.2, =0.0.1, =2.1.8, =2.5.4 Source cves: CVE-2026-56812 Source advisory: SNYK:JS-PHOENIX-17889828...
Security Bulletin: Multiple Vulnerabilities in IBM API Connect
Summary Multiple vulnerabilities were addressed in IBM API Connect version v10.0.8.10 Vulnerability Details CVEID:CVE-2026-33244 DESCRIPTION: React Router is a router for React. In versions 7.5.1 through 7.13.1, when using Framework Mode with pre-rendering enabled, improper neutralization of the...
ROOT-APP-NPM-CVE-2026-22030 CVE-2026-22030 in @rootio/react-router - Patched by Root
Root has patched CVE-2026-22030 in the @rootio/react-router package for Root:npm. Multiple fixed versions available...
Malicious code in reuactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in react-tiny-popover-next (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7367 Malicious code in react-tiny-popover-next (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7366 Malicious code in react-native-paysafe-apple-pay (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in react-native-paysafe-apple-pay (npm)
--- -= Per source details. Do not edit below this line.=-...