eslint-detailed-reporter 跨站脚本漏洞

eslint-detailed-reporter is a detailed HTML reporting program for ESLINT by the individual developer Marcelo Sauerbrunn Portugal. A cross-site scripting vulnerability exists in eslint-detailed-reporter prior to version 0.9.0, which stems from a security issue in the function renderIssue in the...

PT-2023-15928 · Mportuga · Eslint-Detailed-Reporter

Name of the Vulnerable Software and Affected Versions: mportuga eslint-detailed-reporter versions up to 0.9.0 Description: A vulnerability was found in the function renderIssue in the library lib/template-generator.js, which can lead to cross-site scripting when the message argument is manipulate...

Malicious Package

Overview eslint-config-prism is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packa...

Malicious Package

Overview eslint-plugin-yandex-morda-views is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable ...

Malicious Package

Overview @yandex-travel/eslint-config is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if...

Malicious Package

Overview @yandex-travel/eslint-kit is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious Package

Overview eslint-config-promo is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packa...

MAL-2023-4 Malicious code in eslint-plugin-dropbox-sign (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef0b78a956b34b6e0c3db65f1f623e28b0e80753ffae8ea19c75e4217f1dc0b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-313 Malicious code in eslint-plugin-hermione-serp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e7d7f41a51ee9bfecbef8bf69e148220d60868373587d28c800ac1acb3e0112 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-hermione-serp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e7d7f41a51ee9bfecbef8bf69e148220d60868373587d28c800ac1acb3e0112 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview eslint-plugin-automation-custom is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable i...

Malicious Package

Overview @playgami/eslint-config-portal-react is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only...

Malicious Package

Overview @playgami/eslint-config-portal-base is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerab...

MAL-2023-49 Malicious code in @playgami/eslint-config-portal-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4be15151b5b32f83c0928b720d19807598f2d07da01e47b15a580083f99000f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-config-keep (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3dee34721faf47bce15773bdf42e2e7ee9f5cad8eae4aeed1b2a3812ab6be270 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2799 Malicious code in eslint-config-keep (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3dee34721faf47bce15773bdf42e2e7ee9f5cad8eae4aeed1b2a3812ab6be270 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview eslint-config-i18n-scan is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious code in eslint-plwgin-stdnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e4bd8aff7beb430ed17e653b5a5617bd79482688ae7947419d4faf2bd38892b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-conig-prezier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de06e7b70454939428ea6708de1f102a50eb9896a7931145931e12689f69c03d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2825 Malicious code in eslint-plugin-reatc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5953a83892598fc6df2704b6b0ce799d95c0dacecc9d5629b713f7f2539d15c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...