Threats Tagged 'mal-2026-14300'
View all threats tagged with 'mal-2026-14300'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'mal-2026-14300'
Click on any threat for detailed analysis and mitigation recommendations
Malicious code in eth-react-provider (npm) 0 The npm package eth-react-provider version 1.0.0 is trojanized with malicious code. Although it advertises a React Ethereum provider API, the shipped main entry contains obfuscated web3.js subscription code and a large hidden payload executed at module load. This payload uses complex obfuscation techniques to evade static analysis. The source code in the tarball is clean, indicating the built artifact was tampered with to include malicious behavior. Any project requiring this package will execute the opaque code, potentially compromising the environment. Join the discussion | GCVE Database | 08/19/2026, 10:14:36 UTC Added: 08/19/2026, 13:50:26 UTC |
Showing 1 to 1 of 1 result