PT-2026-123700

TuxCare rebuilt @babel/plugin-transform-react-display-name to address 1 CVE. Fixed in 7.16.7-tuxcare.3...

PT-2026-124577

TuxCare rebuilt @babel/plugin-transform-react-display-name to address 1 CVE. Fixed in 7.29.0-tuxcare.1...

PT-2026-124581

TuxCare rebuilt @babel/plugin-transform-react-display-name to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

PT-2026-124580

TuxCare rebuilt @babel/plugin-transform-react-display-name to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

PT-2026-124593

TuxCare rebuilt @babel/plugin-transform-react-jsx to address 1 CVE. Fixed in 7.29.0-tuxcare.2...

PT-2026-124590

TuxCare rebuilt @babel/plugin-transform-react-jsx to address 1 CVE. Fixed in 7.18.9-tuxcare.2...

PT-2026-124575

TuxCare rebuilt @babel/plugin-transform-react-display-name to address 1 CVE. Fixed in 7.12.5-tuxcare.1...

PT-2026-124588

TuxCare rebuilt @babel/plugin-transform-react-jsx to address 1 CVE. Fixed in 7.16.7-tuxcare.1...

PT-2026-124592

TuxCare rebuilt @babel/plugin-transform-react-jsx to address 1 CVE. Fixed in 7.12.18-tuxcare.2...

PT-2026-124595

TuxCare rebuilt @babel/plugin-transform-react-jsx to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

PT-2026-124573

TuxCare rebuilt @babel/plugin-transform-react-display-name to address 1 CVE. Fixed in 7.14.8-tuxcare.1...

PT-2026-124582

TuxCare rebuilt @babel/plugin-transform-react-display-name to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...

PT-2026-124578

TuxCare rebuilt @babel/plugin-transform-react-display-name to address 1 CVE. Fixed in 7.12.18-tuxcare.2...

PT-2026-123701

TuxCare rebuilt @babel/plugin-transform-react-jsx to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

PT-2026-124594

TuxCare rebuilt @babel/plugin-transform-react-jsx to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

PT-2026-124576

TuxCare rebuilt @babel/plugin-transform-react-display-name to address 1 CVE. Fixed in 7.18.9-tuxcare.2...

Malware in transform-react-jsx

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in transform-react-jsx (npm)

The package 'transform-react-jsx' is part of the PhantomRaven supply chain attack campaign Wave 2. It uses a Remote Dynamic Dependency RDD technique: the published package appears benign but includes a URL-based dependency in package.json pointing to an attacker-controlled C2 server...

MAL-2026-1508 Malicious code in transform-react-jsx (npm)

The package 'transform-react-jsx' is part of the PhantomRaven supply chain attack campaign Wave 2. It uses a Remote Dynamic Dependency RDD technique: the published package appears benign but includes a URL-based dependency in package.json pointing to an attacker-controlled C2 server...

Malicious Package

Overview transform-react-display-name is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...