Malicious Package

Overview not-remix is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in not-remix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22362c650e0f1e4a3b8732c99933a4912993a5f69d1fa467155e99819b456f97 The package not-remix was found to contain malicious code. Source: ghsa-malware f471379763177dc7688b7b7ba20bd78855c96101735c5800af7a4affe6be6760 Any...

MAL-2026-1804 Malicious code in not-remix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22362c650e0f1e4a3b8732c99933a4912993a5f69d1fa467155e99819b456f97 The package not-remix was found to contain malicious code. Source: ghsa-malware f471379763177dc7688b7b7ba20bd78855c96101735c5800af7a4affe6be6760 Any...

@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects

A cross site scripting flaw has been discovered in the npm react-router and @remix-run/router packages. React Router and Remix v1/v2 SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintend...