MAL-2025-4476 Malicious code in eslint-format (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 990c333445462efa33b1726d3ff2b0b14a86a3c474eb5f2564f583456e64cb0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4341 Malicious code in eslint-typescript-runtime-check (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be050b4e52992e8c09c9654e29825a2715f4b5a07c8b11c06bcb61163c525354 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-typescript-runtime-check (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be050b4e52992e8c09c9654e29825a2715f4b5a07c8b11c06bcb61163c525354 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-config-rth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ada83835d1a1d917e96a39accdde75a1be468e8f7c6dffdbe72b44e9941223c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4340 Malicious code in eslint-config-rth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ada83835d1a1d917e96a39accdde75a1be468e8f7c6dffdbe72b44e9941223c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-4942

A vulnerability was found in mportuga eslint-detailed-reporter up to 0.9.0 and classified as problematic. Affected by this issue is the function renderIssue in the library lib/template-generator.js. The manipulation of the argument message leads to cross site scripting. The attack may be launched...

CVE-2021-26275

The eslint-fixer package through 0.1.5 for Node.js allows command injection via shell metacharacters to the fix function. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. The ozum/eslint-fixer GitHub repository has been intentionally deleted...

CVE-2021-21278

RSSHub is an open source, easy to use, and extensible RSS feed generator. In RSSHub before version 7f1c430 non-semantic versioning there is a risk of code injection. Some routes use eval or Function constructor, which may be injected by the target site with unsafe code, causing server-side securi...

CVE-2020-1481

A remote code execution vulnerability exists in the ESLint extension for Visual Studio Code when it validates source code after opening a project, aka 'Visual Studio Code ESLint Extention Remote Code Execution Vulnerability'...

Malicious code in eslint-plugin-i18n-strings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52f5d25719716952625ab6fabacd4ccb2743e7066584b9b76cf5c198a0ebfc66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ts-runtime-compat-check (npm)

The npm package ts-runtime-compat-check is a malicious package that functions as a key component in a remote code execution attack chain. This package: 1. Contains a postinstall script that executes lib/install.js 2. The install script makes HTTP requests to a server specified by an environment...

Malicious code in @johndeere-tech/eslint-plugin-timbercloud-custom-rules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61308d7848e55b8e455ca17307d037a12cbcb121760bacc64d9f8b574c08861d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @styletime/eslint-config (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in eslint-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88ee5c779a1b0197babcfad8403ebce7dfa723926adacc82082335254338d7a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3489 Malicious code in eslint-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88ee5c779a1b0197babcfad8403ebce7dfa723926adacc82082335254338d7a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3397 Malicious code in eslint-config-bfx-ui (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in eslint-config-bfx-ui (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in eslint-config-mytonwallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 053fc557bc8d1830f63a74479e9c52bef75ef401075b73d0845fa6235837cdfb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3172 Malicious code in eslint-config-mytonwallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 053fc557bc8d1830f63a74479e9c52bef75ef401075b73d0845fa6235837cdfb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2727 Malicious code in eslint-config-hectorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f6f7f9a7ef4ddc982849df1b0144158db3f60bef6633d7797c6f25a18cc2ec2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...