npm - OSV

GHSA-x7m8-jrm8-hpvx

npm/@eigenpal/docx-editor-core
npm/@eigenpal/docx-editor-react

@eigenpal/docx-editor-react: CSS injection and print-time XSS via unescaped embedded font-family name 10 Sep

Fix available
Severity - 8.1 (High)

MAL-2026-16047

npm/@usemosaik/template-react-js

Malicious code in @usemosaik/template-react-js (npm) 08 Sep

No fix available

MAL-2026-16042

npm/krdpass-auth-react-native

Malicious code in krdpass-auth-react-native (npm) 08 Sep

No fix available

MAL-2026-15845

npm/react-mongoose

Malicious code in react-mongoose (npm) 01 Sep

No fix available

MAL-2026-15529

npm/bui-react-10themes

Malicious code in bui-react-10themes (npm) 28 Aug

No fix available

MAL-2026-15525

npm/amplitude-react-native

Malicious code in amplitude-react-native (npm) 28 Aug

No fix available

MAL-2026-15494

npm/@7nohe/openapi-react-query-codegen

Malicious code in @7nohe/openapi-react-query-codegen (npm) 28 Aug

No fix available

MAL-2026-14484

npm/react-remove-properties

Malicious code in react-remove-properties (npm) 25 Aug

No fix available

MAL-2026-15691

npm/react-hook-doms

Malicious code in react-hook-doms (npm) 24 Aug

No fix available

MAL-2026-14415

npm/react-dynamic-parser

Malicious code in react-dynamic-parser (npm) 24 Aug

No fix available

MAL-2026-14403

npm/react-emits

Malicious code in react-emits (npm) 24 Aug

No fix available

MAL-2026-14368

npm/@syncraft-labs/react

Malicious code in @syncraft-labs/react (npm) 23 Aug

No fix available

MAL-2026-14355

npm/fuel-react

Malicious code in fuel-react (npm) 21 Aug

No fix available

MAL-2026-14324

npm/create-react-app-text

Malicious code in create-react-app-text (npm) 20 Aug

No fix available

MAL-2026-14325

npm/create-react-app-ui

Malicious code in create-react-app-ui (npm) 20 Aug

No fix available

MAL-2026-14326

npm/create-react-app-ux

Malicious code in create-react-app-ux (npm) 20 Aug

No fix available

Vulnerabilities