Malicious Package Affecting @7nohe/openapi-react-query-codegen package, versions =0.5.4=0.5.5=1.6.3=1.6.4=2.2.1=2.2.2=3.0.3=3.0.4=0.0.0-365d4eb738d3146583431948d3ba6e27a32556be=0.0.0-ec7876d6c917dad516ba69bbfafc948b834bf0ab
Threat Intelligence
Exploit Maturity
Snyk has reported that there have been attempts or successful attacks targeting this vulnerability.
Attacked
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-JS-7NOHEOPENAPIREACTQUERYCODEGEN-19424702
- published28 Aug 2026
- disclosed28 Aug 2026
Introduced: 28 Aug 2026
New Malicious CVE NOT AVAILABLE CWE-506 (opens in a new tab)Common Weakness Enumeration (CWE) is a category system for software weaknesses
How to fix?
Avoid using all malicious instances of the @7nohe/openapi-react-query-codegen package.
Overview
@7nohe/openapi-react-query-codegen is a malicious package.
via the binding.gyp compilation process. An attacker can execute arbitrary Python code during package installation-even without preinstall scripts declared in package.json—by placing malicious expressions in the conditions field evaluated by node-gyp.