Malicious code in eslint-config-finance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d12427cc293ba0b610fa9341045e6d546b05be734e8b9b3135136720e183f04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10486 Malicious code in eslint-config-finance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d12427cc293ba0b610fa9341045e6d546b05be734e8b9b3135136720e183f04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-config-ezugi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d56fee7da920240c31fc321fe3cf58c9364d91f02c237c95103fbb7d7922dc2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10260 Malicious code in eslint-config-ezugi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d56fee7da920240c31fc321fe3cf58c9364d91f02c237c95103fbb7d7922dc2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-evo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04325a96cfbff0b91342138baf94c31960794bb6b22d270ae933581f0da5df5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10243 Malicious code in eslint-plugin-evo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04325a96cfbff0b91342138baf94c31960794bb6b22d270ae933581f0da5df5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

@2digits/eslint-config (>=2.6.0, <=2.7.0), @2digits/eslint-plugin (>=2.2.9, <=2.3.0) +37 more potentially affected by CVE-2024-21539 via @eslint/plugin-kit (0.1.0)

@eslint/plugin-kit NPM version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @eslint/plugin-kit and may be impacted: - @2digits/eslint-config =2.6.0, =2.2.9, =0.0.133, =1.23.46, =2.0.1, =20240910.35.32, =13.2.8, =2024.3.44, =2024.3.45 -...

Regular Expression Denial of Service (ReDoS)

Overview @eslint/plugin-kit is an Utilities for building ESLint plugins. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS due to improper input sanitization. An attacker can increase the CPU usage and crash the program by exploiting this vulnerability...

Malicious code in eslint-plugin-no-unsafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 999dd9620607592cd0a534cc111ac3e92a38fbedf03d3921d0f975b3482fb49c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9456 Malicious code in eslint-plugin-no-unsafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 999dd9620607592cd0a534cc111ac3e92a38fbedf03d3921d0f975b3482fb49c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-config-bc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6df69ef80bd1fa8d92354d60af1310a623bcc81f45747601445f423c670e0545 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9437 Malicious code in eslint-config-bc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6df69ef80bd1fa8d92354d60af1310a623bcc81f45747601445f423c670e0545 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-v7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2b2fa3b66c2966165d7e2c1e4d354ceb118ff1887ad258f5572943451a1f6c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9598 Malicious code in eslint-v7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2b2fa3b66c2966165d7e2c1e4d354ceb118ff1887ad258f5572943451a1f6c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-rossum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 35e31ca4335b37c9acf1cc537c185f8c152911f991e75e3b8b248348d7f42e0a The OpenSSF Package Analysis project identified 'eslint-plugin-rossum' @ 7.7.7 npm as malicious. It is considered malicious because: - The packa...

Malicious code in @fdp-tools/eslint-formatter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5159c12014f3592f859dffa0d8c21b7f183b426a36d2de61f052cfa79fc5e809 The OpenSSF Package Analysis project identified '@fdp-tools/eslint-formatter' @ 0.0.14 npm as malicious. It is considered malicious because: - T...

MAL-2024-9105 Malicious code in @fdp-tools/eslint-formatter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5159c12014f3592f859dffa0d8c21b7f183b426a36d2de61f052cfa79fc5e809 The OpenSSF Package Analysis project identified '@fdp-tools/eslint-formatter' @ 0.0.14 npm as malicious. It is considered malicious because: - T...

Malicious code in eslint-config-b2b (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9498fe4fe7d76f71e291bf28290e9ed7f2e2d6aa1d0572ef9544e2a51eb87ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-xp-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10d7d633334fcc8ab953c0b2e6d92181eccf3a812bcca44f7fb42ea0e9da57f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8891 Malicious code in eslint-plugin-xp-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10d7d633334fcc8ab953c0b2e6d92181eccf3a812bcca44f7fb42ea0e9da57f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...