New Research: Supply Chain Attack on Axios Pulls Malicious Dependency from npm.Details →
@react-native/core-cli-utils
Advanced tools
@react-native/core-cli-utils - npm Package Compare versions
+1
-1
| { | ||
| "name": "@react-native/core-cli-utils", | ||
| "version": "0.86.0-nightly-20260407-23f7dc4f1", | ||
| "version": "0.86.0-nightly-20260408-8bac1df5a", | ||
| "description": "React Native CLI library for Frameworks to build on", | ||
@@ -5,0 +5,0 @@ "license": "MIT", |
New alerts
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 2 instances in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
Fixed alerts
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 2 instances in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
No metric changes
No dependency changes