1703 matches found
scavenger_scanner
CVE-2025-54313 IOC Scanner Escáneres multiplataforma para detectar Indicadores de Compromiso IOCs relacionados con el ataque a la cadena de suministro de eslint-config-prettier CVE-2025-54313. El 18 de julio de 2025, varios paquetes npm populares fueron comprometidos mediante un ataque de phishin...
cve-2023-28771-demo
React + TypeScript + Vite This template provides a minimal setup to get React working in Vite with HMR and some ESLint rules. Currently, two official plugins are available: @vitejs/plugin-react uses Babel for Fast Refresh @vitejs/plugin-react-swc uses SWC for Fast Refresh Expanding the ESLint...
Malicious Package
Overview bellatrix-middleware-yildun-eslint-config is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...
Malicious code in eslint-rxjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2794273ee7e40da4b37c017636209acf1402b1104ab5fc265a43cc7d83228e72 eslint-rxjs is a masquerade package whose npm metadata is internally inconsistent: the name references ESLint/RxJS, the description reads 'Integrate...
MAL-2026-15812 Malicious code in eslint-rxjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2794273ee7e40da4b37c017636209acf1402b1104ab5fc265a43cc7d83228e72 eslint-rxjs is a masquerade package whose npm metadata is internally inconsistent: the name references ESLint/RxJS, the description reads 'Integrate...
Malicious code in eslint-prettier-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 657c75af75154da75ac5073b9dcea65c04bdb3f493f3a72d79f1847df90bf449 The package's postinstall hook runs index.cjs's onInstall, which performs await fetch"https://2939e69fc408.ngrok-free.app/stats" and passes the...
MAL-2026-15601 Malicious code in eslint-prettier-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 657c75af75154da75ac5073b9dcea65c04bdb3f493f3a72d79f1847df90bf449 The package's postinstall hook runs index.cjs's onInstall, which performs await fetch"https://2939e69fc408.ngrok-free.app/stats" and passes the...
Malicious code in eslint-generate-prerelease (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26b3f1a7acd55a1642c9615fe72871781a6c0d6bea6f9d31aa42c700aa799704 Package ships an empty module index.js = 'module.exports = ;' under a name that resembles internal tooling, published at an inflated version 99.9.1 —...
MAL-2026-13979 Malicious code in eslint-generate-prerelease (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26b3f1a7acd55a1642c9615fe72871781a6c0d6bea6f9d31aa42c700aa799704 Package ships an empty module index.js = 'module.exports = ;' under a name that resembles internal tooling, published at an inflated version 99.9.1 —...
Malicious code in eslint-generate-release (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4478598213eba844460a99bf323ef024e2fb906c918736cc7e593745029e16b4 [email protected] is a hollow package whose index.js exports an empty object and whose only effect on install is dependency resolution...
MAL-2026-13981 Malicious code in eslint-publish-release (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3befb9fa08cae88e2ebcfb7877a33453bc0b95e0876fb5f76d55b011c8c9869 [email protected] is a hollow package index.js is an empty stub, no lifecycle scripts whose only effect on install is dependency...
Malicious code in eslint-publish-release (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3befb9fa08cae88e2ebcfb7877a33453bc0b95e0876fb5f76d55b011c8c9869 [email protected] is a hollow package index.js is an empty stub, no lifecycle scripts whose only effect on install is dependency...
GHSA-5P4M-2WFM-XMQJ vulnerabilities
Vulnerabilities for packages: lerna, foxx-cli, vitess, authentik, saf, awx, unleash-proxy, renovate, wazuh-dashboard-fips, opensearch-dashboards, code-server, pulumi, arangodb, jitsucom-jitsu, gitlab-rails-ce-fips, homepage, opensearch-dashboards-fips, argo-workflows, percona-server-mongodb,...
GHSA-5P4M-2WFM-XMQJ vulnerabilities
Vulnerabilities for packages: lerna, pulumi, eslint, jitsucom-jitsu, ts-patch, kubeflow-katib, sqlpad, renovate, opensearch-dashboards, prism, argo-workflows, saf, vitess, langfuse, code-server...
Malicious code in eslint-plugin-vitest-ts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a354edd3ce58afcb537f1e58b5152244cc6a98c6b0462de297262d9aba4e17d3 The package declares itself as an ESLint plugin but ships copies of nodemailer's source layout along with an obfuscated install-time loader...
MAL-2026-12370 Malicious code in eslint-plugin-vitest-ts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a354edd3ce58afcb537f1e58b5152244cc6a98c6b0462de297262d9aba4e17d3 The package declares itself as an ESLint plugin but ships copies of nodemailer's source layout along with an obfuscated install-time loader...
Malicious code in time-linters-webapp-eslint-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b89eb401bae118699fcd79b686c0d6ace5e579df1ea42a87d6ad18de405614c The package's top-level index.js unconditionally requires./runtime on load. runtime.js assembles a rotating list of Cloudflare Workers hostnames...
MAL-2026-12479 Malicious code in time-linters-webapp-eslint-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b89eb401bae118699fcd79b686c0d6ace5e579df1ea42a87d6ad18de405614c The package's top-level index.js unconditionally requires./runtime on load. runtime.js assembles a rotating list of Cloudflare Workers hostnames...
MAL-2026-11795 Malicious code in @qlik/eslint-config-react (npm)
npm/@qlik/eslint-config-react is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
Malicious code in @qlik/eslint-config-react (npm)
npm/@qlik/eslint-config-react is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...