Malicious code in eslint-plugin-azure-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99950261a945e672655051594d3e82e4b3f3559ac2e4b8218c71bfdc85a6e294 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2811 Malicious code in eslint-plugin-azure-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99950261a945e672655051594d3e82e4b3f3559ac2e4b8218c71bfdc85a6e294 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-config-support (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 328a0809c69124d153b5f7aa0abf44f91633207c5b6a59e1dfd526c97a8e2fc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2806 Malicious code in eslint-config-support (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 328a0809c69124d153b5f7aa0abf44f91633207c5b6a59e1dfd526c97a8e2fc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-coinbase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a89797beb5d0ffafe5428539929cb1d521694dd2098a29c0c61a627f3c4e6423 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2812 Malicious code in eslint-plugin-coinbase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a89797beb5d0ffafe5428539929cb1d521694dd2098a29c0c61a627f3c4e6423 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-pan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b81abbc1cbb8d6be5013b7086a11c782c254ced9bcdc0ba3b07c5de171ad68e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2823 Malicious code in eslint-plugin-pan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b81abbc1cbb8d6be5013b7086a11c782c254ced9bcdc0ba3b07c5de171ad68e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-seller-ui-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a2a70b6c59d84f180c6375345e6df311615b32f69cd6d6da58fd50cc54a12ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2826 Malicious code in eslint-plugin-seller-ui-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a2a70b6c59d84f180c6375345e6df311615b32f69cd6d6da58fd50cc54a12ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-kavak (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89ac6e77aa5aa6dec64f082bee8330aa686fd2d7d315dc1d474cbaaddbc1c7c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2819 Malicious code in eslint-plugin-kavak (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89ac6e77aa5aa6dec64f082bee8330aa686fd2d7d315dc1d474cbaaddbc1c7c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

compare-eslint-config (>=0.1.0 <=0.1.1) potentially affected by CVE-2020-7629 via install-package (=0.1.0)

install-package NPM version =0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on install-package and may be impacted: - compare-eslint-config =0.1.0, =0.1.1 Source cves: CVE-2020-7629 Source advisory: OSV:GHSA-6M4R-M3GC-H4R5...

GHSA-PGJJ-866W-FC5C Risk of code injection

Impact Some routes use eval or Function constructor, which may be injected by the target site with unsafe code, causing server-side security issues Patches Temporarily removed the problematic route and added a no-new-func rule to eslint Self-built users should upgrade to 7f1c430 and later as soon...

@jheubuch/ng-ws-template (>=1.0.1 <=1.0.2), pg-generator (>=3.5.0 <=4.8.3) +1 more potentially affected by CVE-2021-26275 via eslint-fixer (=0.1.5)

eslint-fixer NPM version =0.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on eslint-fixer and may be impacted: - @jheubuch/ng-ws-template =1.0.1, =3.5.0, =4.8.3 - pg-generator-react-template =0.1.0 Source cves: CVE-2021-26275 Source advisory:...

GHSA-45W5-PVR8-4RH5 Command injection in eslint-fixer

The eslint-fixer package through 0.1.5 for Node.js allows command injection via shell metacharacters to the fix function. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. The ozum/eslint-fixer GitHub repository has been intentionally deleted...

Command injection in eslint-fixer

The eslint-fixer package through 0.1.5 for Node.js allows command injection via shell metacharacters to the fix function. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. The ozum/eslint-fixer GitHub repository has been intentionally deleted...

The vulnerability of the Microsoft Visual Studio Code ESLint Extension lies in the lack of protection for service data, allowing a malicious actor to execute arbitrary code.

The vulnerability of the Microsoft Visual Studio Code ESLint Extension lies in the lack of protection for service data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Arbitrary Code Execution

eslint-fixer is vulnerable to arbitrary code execution. The vulnerability exists through the lack of sanitization on the input to the childprocess.exec method...

CVE-2021-26275

The eslint-fixer package through 0.1.5 for Node.js allows command injection via shell metacharacters to the fix function. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. The ozum/eslint-fixer GitHub repository has been intentionally deleted...