@capsense/core-ui (npm) · Malicious Code
Affects @capsense/core-uiSource GCVE Database
Rated by Threat Radar
Data as of 25 Oct 2026, 22:40 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| npm@capsense/core-ui | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Consider removing this package from existing environments and replacing it with a trusted alternative. Monitor vendor or repository advisories for updates or official remediation.
Description
The npm package '@capsense/core-ui' version 99.99.100 has been identified as malicious by the OpenSSF Package Analysis project. The package is flagged because it communicates with a domain associated with malicious activity. There is no CVSS score available, and no known exploits in the wild have been reported. No patch or remediation information is provided.