MAL-2025-37593 Malicious code in ui-extensions-react (npm)

The package ui-extensions-react was found to contain malicious code...

MAL-2025-33240 Malicious code in signon-react-data-grid (npm)

The package signon-react-data-grid was found to contain malicious code...

MAL-2025-13723 Malicious code in @zalastax/nolb-react-pr (npm)

The package @zalastax/nolb-react-pr was found to contain malicious code...

MAL-2025-13794 Malicious code in @zalastax/nolb-react-t (npm)

The package @zalastax/nolb-react-t was found to contain malicious code...

MAL-2025-40445 Malicious code in yelp-react-component-typography (npm)

The package yelp-react-component-typography was found to contain malicious code...

MAL-2025-13824 Malicious code in @zalastax/nolb-react-u5 (npm)

The package @zalastax/nolb-react-u5 was found to contain malicious code...

MAL-2025-31805 Malicious code in react-naitve-components (npm)

The package react-naitve-components was found to contain malicious code...

MAL-2025-13726 Malicious code in @zalastax/nolb-react-pu (npm)

The package @zalastax/nolb-react-pu was found to contain malicious code...

MAL-2025-13703 Malicious code in @zalastax/nolb-react-iv (npm)

The package @zalastax/nolb-react-iv was found to contain malicious code...

MAL-2025-31783 Malicious code in react-filter-tree (npm)

The package react-filter-tree was found to contain malicious code...

MAL-2025-31837 Malicious code in react-pdd-calendar (npm)

The package react-pdd-calendar was found to contain malicious code...

MAL-2025-13747 Malicious code in @zalastax/nolb-react-rt (npm)

The package @zalastax/nolb-react-rt was found to contain malicious code...

MAL-2025-13774 Malicious code in @zalastax/nolb-react-ss (npm)

The package @zalastax/nolb-react-ss was found to contain malicious code...

MAL-2025-13834 Malicious code in @zalastax/nolb-react-uk (npm)

The package @zalastax/nolb-react-uk was found to contain malicious code...

MAL-2025-23707 Malicious code in jcatalog-react-reference-search (npm)

The package jcatalog-react-reference-search was found to contain malicious code...

MAL-2025-14104 Malicious code in admithub-react-diagrams (npm)

The package admithub-react-diagrams was found to contain malicious code...

Malicious code in generator-react-ui-component (npm)

The package generator-react-ui-component was found to contain malicious code...

MAL-2025-6821 Malicious code in @tradair-repo/sources-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4c2e8efcfd67964d523b508359644439a1c57011cf171ba350241c6949654fe4 The OpenSSF Package Analysis project identified '@tradair-repo/sources-react' @ 1.0.0-malicious npm as malicious. It is considered malicious...

CVE-2025-55008

The AuthKit library for React Router 7+ provides helpers for authentication and session management using WorkOS & AuthKit with React Router. In versions 0.6.1 and below, @workos-inc/authkit-react-router exposed sensitive authentication artifacts — specifically sealedSession and accessToken by...

Malicious code in eslint-plugin-react_editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 091ef657bc115b400dc3d8cd65691df53caef85fa307f52d627aac4d50120a77 The OpenSSF Package Analysis project identified 'eslint-plugin-reacteditor' @ 71.71.72 npm as malicious. It is considered malicious because: - T...