npm
Malicious react-dropzone-truffle @100.27.9
Vulnerability report · Last retrieved from osv.dev August 14, 2026 at 12:32 PM UTC
OSV ID
MAL-2026-999
Ecosystem
npm
Summary
The package react-dropzone-truffle was found to contain malicious code.
Source: amazon-inspector (deb9aafcb06b44346b4a153006bf1230d02f97d4f76ac2797f42a22005658c85)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.