MAL-2026-1485

    Dashboard / Malicious Package / MAL-2026-1485

    MAL-2026-1485

    Published: 16 Mar 2026Last Modified: 23 Mar 2026

    Summary: Malicious code in react-refresh-update (npm)

    Details: Package contains highly obfuscated code with dynamic execution using eval(), a strong indicator of malicious intent. YARA rule matches confirm. Source: amazon-inspector (68cf0c0bd6ed2a8c07bc175b5c0cc7f86a49133e67dd5d8f68f37309c5f1a463) The package react-refresh-update was found to contain malicious code.

    References: https://app.safedep.io/community/malysis/01KJY66T1PJCZD1V81210YQCDH

    Affected packages

    Package

    Name: react-refresh-update

    Purl: pkg:npm/react-refresh-update

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    MAL-2026-1485 | CVE-DB