react-dom-bindings

MAL-2025-192973

npmmalware12/30/2025
Description

Malicious code in react-dom-bindings (npm)

Indicators of Compromise
SHA256 Hashes (2)
059df6e89c5774db15f219471617381a49032fe3a182fdecd2236895cfff4ecb
e3c021e2818d17945e50bcb89d19d34a8750ca14078220d113dc8b4c5f0c1392
References (1)
https://github.com/advisories/GHSA-r2mv-xp84-8cc6OSV
Details
Ecosystemnpm
Attack Typemalware
Published12/30/2025
Affected Versions
0
Aliases
GHSA-r2mv-xp84-8cc6
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001