npm - OSV

MAL-2026-17294

npm/react-nodejs

Malicious code in react-nodejs (npm) 3 days ago

No fix available

MAL-2026-17155

npm/@osl-design/react

Malicious code in @osl-design/react (npm) 24 Sep

No fix available

MAL-2026-16522

npm/@egencia/uitk-react-text

Malicious code in @egencia/uitk-react-text (npm) 22 Sep

No fix available

MAL-2026-16521

npm/@egencia/uitk-react-spacing

Malicious code in @egencia/uitk-react-spacing (npm) 22 Sep

No fix available

MAL-2026-16519

npm/@egencia/uitk-react-foundation

Malicious code in @egencia/uitk-react-foundation (npm) 22 Sep

No fix available

MAL-2026-16520

npm/@egencia/uitk-react-layout-flex

Malicious code in @egencia/uitk-react-layout-flex (npm) 22 Sep

No fix available

MAL-2026-16518

npm/@egencia/uitk-react

Malicious code in @egencia/uitk-react (npm) 22 Sep

No fix available

MAL-2026-16374

npm/test-react-app-in

Malicious code in test-react-app-in (npm) 22 Sep

No fix available

MAL-2026-16375

npm/test-react-app-out

Malicious code in test-react-app-out (npm) 22 Sep

No fix available

MAL-2026-16376

npm/test-react-app-way

Malicious code in test-react-app-way (npm) 22 Sep

No fix available

MAL-2026-16372

npm/@zig-design-system/react

Malicious code in @zig-design-system/react (npm) 21 Sep

No fix available

GHSA-x7m8-jrm8-hpvx

npm/@eigenpal/docx-editor-core
npm/@eigenpal/docx-editor-react

@eigenpal/docx-editor-react: CSS injection and print-time XSS via unescaped embedded font-family name 10 Sep

Fix available
Severity - 8.1 (High)

MAL-2026-16047

npm/@usemosaik/template-react-js

Malicious code in @usemosaik/template-react-js (npm) 08 Sep

No fix available

MAL-2026-16042

npm/krdpass-auth-react-native

Malicious code in krdpass-auth-react-native (npm) 08 Sep

No fix available

MAL-2026-15845

npm/react-mongoose

Malicious code in react-mongoose (npm) 01 Sep

No fix available

MAL-2026-15529

npm/bui-react-10themes

Malicious code in bui-react-10themes (npm) 28 Aug

No fix available

Vulnerabilities