react-flex-tools

MAL-2025-192855

npmmalware12/23/2025
Description

Malicious code in react-flex-tools (npm)

Indicators of Compromise
SHA256 Hashes (3)
2e340363a8999fa89f8f3ad5ea5318c4d32edd746aa2d80f4f89da2b1b69fd94
1ab5b4a0a39a8b9ccc5dd27ea7207f3006128207203ee8ceb99dbef4be0ec9d3
bc0a8579ece68eb524c896cf4694565f937a05bdb5a8c9a9927dc526accbc625
References (3)
https://socket.dev/blog/north-korea-contagious-interview-npm-attacksOSVhttps://security.snyk.io/vuln/SNYK-JS-REACTFLEXTOOLS-14152285OSVhttps://thehackernews.com/2025/11/north-korean-hackers-deploy-197-npm.htmlOSV
Details
Ecosystemnpm
Attack Typemalware
Published12/23/2025
Aliases
SNYK-JS-REACTFLEXTOOLS-14152285
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001