1698 matches found
MAL-2025-295 Malicious code in eslint-config-atlassian-fecq (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2dec5c0511ddd42ff4442d47dd77fed92c193dbb7a478850e568766c16d79986 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in calypso-eslint-overrides (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04e56d5029c9f673038593248e7a19047892f45f4344d5a98af273acf9d2a358 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in eslint-plugin-paste-internal (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef7b4e70800026ad3cf2470622a7395db0d5a043654e45122e8ce535555604dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in eslint-config-smaato (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db0a05213eccd279084fc7d5d7545e8ddd2b658f9db8a890b1994b4c9a6d6953 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-186 Malicious code in eslint-plugin-paste-internal (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef7b4e70800026ad3cf2470622a7395db0d5a043654e45122e8ce535555604dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-185 Malicious code in eslint-config-smaato (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db0a05213eccd279084fc7d5d7545e8ddd2b658f9db8a890b1994b4c9a6d6953 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in eslint-config-proton-lint (npm)
This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d595489e0b5943870a58ffcd154d1a8ab7b4bbd45155465dbe9272bb6471060 Any computer that has this package install...
MAL-2025-60 Malicious code in eslint-config-proton-lint (npm)
This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d595489e0b5943870a58ffcd154d1a8ab7b4bbd45155465dbe9272bb6471060 Any computer that has this package install...
PT-2026-4771
Name of the Vulnerable Software and Affected Versions eslint versions prior to 9.26.0 Description A stack overflow issue exists in eslint when serializing objects containing circular references within the eslint/lib/shared/serialization.js file. The issue is triggered through the RuleTester.run...
MAL-2024-11977 Malicious code in eslint-config-extraterm (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ac174483503687af78d8c768a2f9fa3abad4e982d193634c81b8870484ae360 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in eslint-config-extraterm (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ac174483503687af78d8c768a2f9fa3abad4e982d193634c81b8870484ae360 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @saferpay/eslint-config-base (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 49038c65a69ff50fde7f32068fe7d4705c0ff7424bd0e86e6f87ab5593a99949 The OpenSSF Package Analysis project identified '@saferpay/eslint-config-base' @ 5.9.2 npm as malicious. It is considered malicious because: - T...
MAL-2024-11889 Malicious code in @saferpay/eslint-config-react (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1623fcac8f83c2a752fa07e95cf1391d1f31dd3b8f757f4dbf3e3c170eb7d88d The OpenSSF Package Analysis project identified '@saferpay/eslint-config-react' @ 5.9.2 npm as malicious. It is considered malicious because: -...
Malicious code in @saferpay/eslint-config-react (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1623fcac8f83c2a752fa07e95cf1391d1f31dd3b8f757f4dbf3e3c170eb7d88d The OpenSSF Package Analysis project identified '@saferpay/eslint-config-react' @ 5.9.2 npm as malicious. It is considered malicious because: -...
Malicious code in eslint-plugin-woocommerce (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11350 Malicious code in eslint-plugin-woocommerce (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11349 Malicious code in eslint-config-ui-core-base (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in eslint-config-ui-core-base (npm)
--- -= Per source details. Do not edit below this line.=-...