TI-2026-35596 CVE-2026-48160
react-tracked was vulnerable to malicious code execution via compromised commits
Priority MEDIUM 49
react-tracked provides state usage tracking with Proxies.
dai-shi
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
dai-shi records in CISA KEVNo dai-shi vulnerabilities are listed in CISA KEV.
Records
4 records
TI-2026-35595 CVE-2026-48159
use-reducer-async was vulnerable to malicious code execution via compromised commits
Priority MEDIUM 49
use-reducer-async is a React useReducer with async actions.
TI-2026-35594 CVE-2026-48158
use-context-selector was vulnerable to malicious code execution via compromised commits
Priority MEDIUM 49
use-context-selector is a React useContextSelector hook in userland Between 2026-05-18 15:57:18 and 2026-05-19 15:24:34, the default branch contained malicious commits 9d8481a513b7b0d1c0941b220c69b25de748641b through 6f2…
TI-2026-35597 CVE-2026-48161
react18-use was vulnerable to malicious code execution via compromised commits
Priority MEDIUM 43
react18-use is a React 19 use hook shim.