Malicious Package

Overview wac-react is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview react-sitecore-library is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

Malicious code in @riag-libs/pattern-library-react-hooks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64366b918bd4380cf8b087a445df7d86ef18b21686c577a9ed7bdd523aceac64 The package @riag-libs/pattern-library-react-hooks was found to contain malicious code. Source: ghsa-malware...

Malicious code in @spx-delivery/react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b03f32e2859ef16f71897fc985589e436c704979df087b57bb61fedb63e89c51 The package @spx-delivery/react was found to contain malicious code. Source: ghsa-malware...

Malicious code in chakra-ui-2--react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05221f163f14d551b861ff7d6ac6ea0d6c946d288b5d74ef14de5e10f6d6b43d The package chakra-ui-2--react was found to contain malicious code. Source: ghsa-malware...

MAL-2026-272 Malicious code in chakra-ui-2--react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05221f163f14d551b861ff7d6ac6ea0d6c946d288b5d74ef14de5e10f6d6b43d The package chakra-ui-2--react was found to contain malicious code. Source: ghsa-malware...

EUVD-2026-3110

Malicious code in @riag-libs/pattern-library-react-hooks npm...

Malicious code in chakra-ui-2--react-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d8e94e720f2e969a3349854427d9ac418ea507516a488bc52eef4397d86e5e8 The package chakra-ui-2--react-utils was found to contain malicious code. Source: ghsa-malware...

MAL-2026-301 Malicious code in react-sitecore-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bcb38af52d8a28ad89a31c0415f1673eb2ca18ec76121703ded6334a6b7e6d2 The package react-sitecore-library was found to contain malicious code. Source: ghsa-malware...

MAL-2026-259 Malicious code in @riag-libs/pattern-library-react-hooks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64366b918bd4380cf8b087a445df7d86ef18b21686c577a9ed7bdd523aceac64 The package @riag-libs/pattern-library-react-hooks was found to contain malicious code. Source: ghsa-malware...

MAL-2026-273 Malicious code in chakra-ui-2--react-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d8e94e720f2e969a3349854427d9ac418ea507516a488bc52eef4397d86e5e8 The package chakra-ui-2--react-utils was found to contain malicious code. Source: ghsa-malware...

EUVD-2026-3082

Malicious code in chakra-ui-2--react-utils npm...

EUVD-2026-3060

Malicious code in react-sitecore-library npm...

Malicious code in react-sitecore-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bcb38af52d8a28ad89a31c0415f1673eb2ca18ec76121703ded6334a6b7e6d2 The package react-sitecore-library was found to contain malicious code. Source: ghsa-malware...

Malicious code in bve-react-ui-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7129addcf662b66f1b9c3bccfef1b910ba7d7529205773a6ef69f5fcec9b9178 The package bve-react-ui-kit was found to contain malicious code. Source: ghsa-malware e12ba9c2363df47acb928246ccbbfedb85b5cbfb0f433286818034daf65dfd...

EUVD-2026-3108

Malicious code in @spx-delivery/react npm...

EUVD-2026-3084

Malicious code in bve-react-ui-kit npm...

MAL-2026-261 Malicious code in @spx-delivery/react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b03f32e2859ef16f71897fc985589e436c704979df087b57bb61fedb63e89c51 The package @spx-delivery/react was found to contain malicious code. Source: ghsa-malware...

MAL-2026-271 Malicious code in bve-react-ui-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7129addcf662b66f1b9c3bccfef1b910ba7d7529205773a6ef69f5fcec9b9178 The package bve-react-ui-kit was found to contain malicious code. Source: ghsa-malware e12ba9c2363df47acb928246ccbbfedb85b5cbfb0f433286818034daf65dfd...

Open Redirect

React Router is vulnerable to Open Redirect. The vulnerability is due to insufficient validation of attacker-supplied navigation paths, which allows an attacker to craft a malicious path that forces the application to redirect users to an external, potentially malicious URL...