MAL-2026-1837

    Dashboard / Malicious Package / MAL-2026-1837

    MAL-2026-1837

    Published: 18 Mar 2026Last Modified: 23 Mar 2026

    Summary: Malicious code in react-query-core-utils (npm)

    Details: Source: amazon-inspector (3bce94f40a0e1879b184cd9f5abb5f4850d66aa5705b231b41337c2e2e33a3de) The package react-query-core-utils was found to contain malicious code.

    References:

    Affected packages

    Package

    Name: react-query-core-utils

    Purl: pkg:npm/react-query-core-utils

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    4.4.1
    4.4.2
    4.4.3
    4.4.4
    4.4.5
    4.4.6
    4.4.7
    4.4.8
    4.4.9
    MAL-2026-1837 | CVE-DB