react-tracked vulnerabilities

1 known vulnerability in react-tracked from Dai-shi. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 Critical severity

  react-tracked: Embedded Malicious Code

  CVE-2026-48160Aug 10, 2026Dai-shi

  react-tracked provides state usage tracking with Proxies. Between 2026-05-18 19:26:36 and 2026-05-19 15:22:45, the default branch contained malicious commits 6978272a7d6ca02225cb747ea69f427512e33699 through 949f1a3d6bb1ff7d1a0dec892afd773e742627e8 that execute