VDB
MAL-2025-192971
MAL-2025-192971
PUBLISHED
Malicious code in react-devtools-extensions (npm)
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| npm | react-devtools-extensions | 0, 0 |
Timeline
- Dec 30, 2025 CVE Published
- Jan 2, 2026 CVE Updated
References
- https://github.com/advisories/GHSA-ph84-3h48-w4gw vendor-advisory