Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
MAL-2026-17155
  • npm/@osl-design/react
Malicious code in @osl-design/react (npm) 7 hours ago
  • No fix available
MAL-2026-16522
  • npm/@egencia/uitk-react-text
Malicious code in @egencia/uitk-react-text (npm) 2 days ago
  • No fix available
MAL-2026-16521
  • npm/@egencia/uitk-react-spacing
Malicious code in @egencia/uitk-react-spacing (npm) 2 days ago
  • No fix available
MAL-2026-16519
  • npm/@egencia/uitk-react-foundation
Malicious code in @egencia/uitk-react-foundation (npm) 2 days ago
  • No fix available
MAL-2026-16520
  • npm/@egencia/uitk-react-layout-flex
Malicious code in @egencia/uitk-react-layout-flex (npm) 2 days ago
  • No fix available
MAL-2026-16518
  • npm/@egencia/uitk-react
Malicious code in @egencia/uitk-react (npm) 2 days ago
  • No fix available
MAL-2026-16374
  • npm/test-react-app-in
Malicious code in test-react-app-in (npm) 2 days ago
  • No fix available
MAL-2026-16375
  • npm/test-react-app-out
Malicious code in test-react-app-out (npm) 2 days ago
  • No fix available
MAL-2026-16376
  • npm/test-react-app-way
Malicious code in test-react-app-way (npm) 2 days ago
  • No fix available
MAL-2026-16372
  • npm/@zig-design-system/react
Malicious code in @zig-design-system/react (npm) 2 days ago
  • No fix available
GHSA-x7m8-jrm8-hpvx
  • npm/@eigenpal/docx-editor-core
  • npm/@eigenpal/docx-editor-react
@eigenpal/docx-editor-react: CSS injection and print-time XSS via unescaped embedded font-family name 10 Sep
  • Fix available
  • Severity - 8.1 (High)
MAL-2026-16047
  • npm/@usemosaik/template-react-js
Malicious code in @usemosaik/template-react-js (npm) 08 Sep
  • No fix available
MAL-2026-16042
  • npm/krdpass-auth-react-native
Malicious code in krdpass-auth-react-native (npm) 08 Sep
  • No fix available
MAL-2026-15845
  • npm/react-mongoose
Malicious code in react-mongoose (npm) 01 Sep
  • No fix available
MAL-2026-15529
  • npm/bui-react-10themes
Malicious code in bui-react-10themes (npm) 28 Aug
  • No fix available
MAL-2026-15525
  • npm/amplitude-react-native
Malicious code in amplitude-react-native (npm) 28 Aug
  • No fix available