EUVD-2025-199456

Malicious code in @oku-ui/visually-hidden npm...

Malicious code in @oku-ui/visually-hidden (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6afc6b62de3f9d4eaa542710c9970ee10c57ab88477a9d0579decd308f5c1ad The package @oku-ui/visually-hidden was found to contain malicious code. Source: google-open-source-security...

@oku-ui/hover-card (>=0.4.0 <=0.6.1), @oku-ui/primitives (>=0.4.0 <=0.6.1) +2 more potentially affected by unknown CVE via @oku-ui/visually-hidden (=0.6.1)

@oku-ui/visually-hidden NPM version =0.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on @oku-ui/visually-hidden and may be impacted: - @oku-ui/hover-card =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.6.1 Source cves: unknown CVE Source advisory:...

Malicious code in react-visually-hidden (npm)

--- -= Per source details. Do not edit below this line.=-...