MAL-2026-2010 — Vulnetix

MAL-2026-2010 PUBLISHED

Malicious code in yelp-react-component-badge (npm)

Affected Products

Vendor	Product	Versions
npm	yelp-react-component-badge	99.0.4, 0, 0

Timeline

Mar 21, 2026 CVE Published
Mar 24, 2026 CVE Updated

References

https://github.com/advisories/GHSA-fr9v-hm5m-rv52 advisory

Open in Interactive Console →

$ Console Community · 100/wk Open console ›