npm
Malicious react-mandes @1.1.4
Vulnerability report · Last retrieved from osv.dev August 14, 2026 at 8:32 AM UTC
OSV ID
MAL-2025-191582
Ecosystem
npm
Summary
The package react-mandes was found to contain malicious code.
Source: amazon-inspector (8242aeb2b6b10985e7b4c0a35cb731d81095b7f039aea2886d0c4c35ffa5d9ea)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.