npm - OSV

MAL-2026-16374

npm/test-react-app-in

Malicious code in test-react-app-in (npm) yesterday

No fix available

MAL-2026-16375

npm/test-react-app-out

Malicious code in test-react-app-out (npm) yesterday

No fix available

MAL-2026-16376

npm/test-react-app-way

Malicious code in test-react-app-way (npm) yesterday

No fix available

MAL-2026-16372

npm/@zig-design-system/react

Malicious code in @zig-design-system/react (npm) yesterday

No fix available

GHSA-x7m8-jrm8-hpvx

npm/@eigenpal/docx-editor-core
npm/@eigenpal/docx-editor-react

@eigenpal/docx-editor-react: CSS injection and print-time XSS via unescaped embedded font-family name 10 Sep

Fix available
Severity - 8.1 (High)

MAL-2026-16047

npm/@usemosaik/template-react-js

Malicious code in @usemosaik/template-react-js (npm) 08 Sep

No fix available

MAL-2026-16042

npm/krdpass-auth-react-native

Malicious code in krdpass-auth-react-native (npm) 08 Sep

No fix available

MAL-2026-15845

npm/react-mongoose

Malicious code in react-mongoose (npm) 01 Sep

No fix available

MAL-2026-15529

npm/bui-react-10themes

Malicious code in bui-react-10themes (npm) 28 Aug

No fix available

MAL-2026-15525

npm/amplitude-react-native

Malicious code in amplitude-react-native (npm) 28 Aug

No fix available

MAL-2026-15494

npm/@7nohe/openapi-react-query-codegen

Malicious code in @7nohe/openapi-react-query-codegen (npm) 28 Aug

No fix available

MAL-2026-14484

npm/react-remove-properties

Malicious code in react-remove-properties (npm) 25 Aug

No fix available

MAL-2026-15691

npm/react-hook-doms

Malicious code in react-hook-doms (npm) 24 Aug

No fix available

MAL-2026-14415

npm/react-dynamic-parser

Malicious code in react-dynamic-parser (npm) 24 Aug

No fix available

MAL-2026-14403

npm/react-emits

Malicious code in react-emits (npm) 24 Aug

No fix available

MAL-2026-14368

npm/@syncraft-labs/react

Malicious code in @syncraft-labs/react (npm) 23 Aug

No fix available

Vulnerabilities