Lucene search
+L

294255 matches found

Github Security Blog
Github Security Blog
•added 2026/09/10 10:45 a.m.•4 views

Malicious code in eslint-plugin-transform-semantic-ui-yakutsk (npm)

Source: amazon-inspector 43b1046da97d6e7c83170cac3d306570016cd8e3b7315de173d686eb7a2bd2e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:45 a.m.•3 views

Malicious code in eslint-plugin-semantic-release-chalk-fusion (npm)

Source: amazon-inspector d7f76b381638ad18356b8c8d18b10785d541bf3b50f7d3ed0032bd37f205212b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:45 a.m.•3 views

Malicious code in eslint-plugin-tool-rest-firebase (npm)

Source: amazon-inspector 0560020b42000a697a1c44e8f3e8ed4c0a9d8cd74d971fce648ff57bbe49f39a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:45 a.m.•6 views

Malicious code in eslint-plugin-perseus-css-loader-eclipse (npm)

Source: amazon-inspector 4f0ddf1aabd198f85639e9d3b3af0ae998cbc891b75eba766e8f9d4bc57097d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:45 a.m.•3 views

Malicious code in eslint-plugin-sadr-commitizen-testcafe (npm)

Source: amazon-inspector 9e2458790d8a94f3e458db7c76cae20f1c9bc1d93ef09dbcc916bf4b8947c51e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:45 a.m.•4 views

Malicious code in eslint-plugin-react-internal (npm)

The package eslint-plugin-react-internal was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:45 a.m.•3 views

Malicious code in eslint-plugin-react-purify (npm)

The package eslint-plugin-react-purify was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:45 a.m.•5 views

Malicious code in eslint-plugin-restart-vega-soap (npm)

The package eslint-plugin-restart-vega-soap was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:45 a.m.•3 views

Malicious code in eslint-plugin-react_editor (npm)

Source: ossf-package-analysis 091ef657bc115b400dc3d8cd65691df53caef85fa307f52d627aac4d50120a77 The OpenSSF Package Analysis project identified 'eslint-plugin-reacteditor' @ 71.71.72 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:45 a.m.•5 views

Malicious code in eslint-plugin-phoebe-chariklo-pegasus (npm)

Source: amazon-inspector 86d10a04cfc4a77f7d8b23de62c16b71dc0245fd1fbd0214dc5ccd8412477e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:45 a.m.•3 views

Malicious code in eslint-plugin-process-sails-update (npm)

Source: amazon-inspector 54131fa2d2dcc4b78de6cb5b6d09342e6dc5740aaa9fbbe5e0ec5cac6985a259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:45 a.m.•3 views

Malicious code in eslint-plugin-spectron-csv-aether (npm)

Source: amazon-inspector 4186d0899623ecf21329b54ac8cfb81a5c3d55ce143400e9dbe0088a6262051d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:45 a.m.•4 views

Malicious code in eslint-plugin-tailwindcss-cosmiconfig-alphard (npm)

Source: amazon-inspector 9e8afdb64b20c818f81c4e664f57f0d63604e0f039189a3fb71f2106206e9cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:45 a.m.•1 views

Malicious code in eslint-plugin-request-indus-magellan (npm)

Source: amazon-inspector 53ef0d07a987d27e4c659a7944026bc057f89b21342a892da7330296ce732087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:45 a.m.•3 views

Malicious code in eslint-plugin-galaxy-xml-canopus (npm)

Source: amazon-inspector f7fa440b71749d145fde8a670cbb74a95100ff3d22173356b9d0dd9711ff2d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:45 a.m.•4 views

Malicious code in eslint-plugin-ophiuchus-pino-chromedriver (npm)

Source: amazon-inspector 72910fde647545178f4ccecb0cd7f8485357f83fd546d2c8329012ecdc9f34e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:45 a.m.•3 views

Malicious code in eslint-plugin-kg-jslint-codeanalyzers (npm)

The package eslint-plugin-kg-jslint-codeanalyzers was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:45 a.m.•3 views

Malicious code in eslint-plugin-jasmine-augmentedreality-airbnb (npm)

The package eslint-plugin-jasmine-augmentedreality-airbnb was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:45 a.m.•3 views

Malicious code in eslint-plugin-gridsome-zenobia-sync (npm)

The package eslint-plugin-gridsome-zenobia-sync was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:45 a.m.•2 views

Malicious code in eslint-plugin-ironfish (npm)

Source: ossf-package-analysis ddb571e2a90d22e958b983fe2578c4dc66915310367953568399aa68773cc77a The OpenSSF Package Analysis project identified 'eslint-plugin-ironfish' @ 1.0.1 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

5.9AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder