VDB
MAL-2025-192977
MAL-2025-192977
PUBLISHED
Malicious code in shopify-app-react-router (npm)
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| npm | shopify-app-react-router | 0, 0 |
Timeline
- Dec 30, 2025 CVE Published
- Jan 2, 2026 CVE Updated
References
- https://github.com/advisories/GHSA-rw2j-q47r-j658 vendor-advisory