react-refresh-update

MAL-2026-1485

Malicious code in react-refresh-update (npm)

Details

Package contains highly obfuscated code with dynamic execution using eval(), a strong indicator of malicious intent. YARA rule matches confirm.

---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (68cf0c0bd6ed2a8c07bc175b5c0cc7f86a49133e67dd5d8f68f37309c5f1a463)
The package react-refresh-update was found to contain malicious code.