0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
react-tabulix-ui
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting react-tabulix-ui, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-10988 | Unknown | Malicious code in react-tabulix-ui (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (6e1730bc033ffe3e5cbe24819446e0c6d41af7bec46ec931a04eca2909ffc7cc) package.json declares a preinstall hook (`node./dist/index.d.js`) that runs automatically on `npm install`. The script at dist/index.d.js decodes a base64-wrapped payload via `Buffer.from(..., 'base64').toString('utf-8')` and dispatches it to `eval`, where the `eval` identifier is obfuscated by reconstructing it from the char-code array `[101,118,97,108]` and accessed via `globalThis[tag](text)`. The decoded payload fetches `https://everyda |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (6e1730bc033ffe3e5cbe24819446e0c6d41af7bec46ec931a04eca2909ffc7cc) package.json declares a preinstall hook (`node./dist/index.d.js`) that runs automatically on `npm install`. The script at dist/index.d.js decodes a base64-wrapped payload via `Buffer.from(..., 'base64').toString('utf-8')` and dispatches it to `eval`, where the `eval` identifier is obfuscated by reconstructing it from the char-code array `[101,118,97,108]` and accessed via `globalThis[tag](text)`. The decoded payload fetches `https://everyda