MAL-2026-1839

    Dashboard / Malicious Package / MAL-2026-1839

    MAL-2026-1839

    Published: 18 Mar 2026Last Modified: 16 Apr 2026

    Summary: Malicious code in react-state-optimizer-core (npm)

    Details: Source: amazon-inspector (782cd7f3728f924a764bf54c8c73a27b8170cdf85f11902e6d8d806db39fa172) The package react-state-optimizer-core was found to contain malicious code.

    References: https://www.reversinglabs.com/blog/npm-fake-install-logs-rat

    Affected packages

    Package

    Name: react-state-optimizer-core

    Purl: pkg:npm/react-state-optimizer-core

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    1.0.0
    1.0.2
    1.0.3
    1.0.4
    1.0.5
    1.0.6
    1.0.7
    1.0.8
    1.0.9
    MAL-2026-1839 | CVE-DB