Malicious code in eslint-config-ffe-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da742ef6b6e2190c72a561c43f976f7b2d81e6a3493cb2e22d7bc4b68683c8de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-config-pagseguro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23370768ada0744b4d019106d5620c1e619676a41b655b341229917a578467fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2803 Malicious code in eslint-config-pagseguro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23370768ada0744b4d019106d5620c1e619676a41b655b341229917a578467fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-azure-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99950261a945e672655051594d3e82e4b3f3559ac2e4b8218c71bfdc85a6e294 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2811 Malicious code in eslint-plugin-azure-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99950261a945e672655051594d3e82e4b3f3559ac2e4b8218c71bfdc85a6e294 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2806 Malicious code in eslint-config-support (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 328a0809c69124d153b5f7aa0abf44f91633207c5b6a59e1dfd526c97a8e2fc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-config-support (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 328a0809c69124d153b5f7aa0abf44f91633207c5b6a59e1dfd526c97a8e2fc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-coinbase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a89797beb5d0ffafe5428539929cb1d521694dd2098a29c0c61a627f3c4e6423 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2812 Malicious code in eslint-plugin-coinbase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a89797beb5d0ffafe5428539929cb1d521694dd2098a29c0c61a627f3c4e6423 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-pan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b81abbc1cbb8d6be5013b7086a11c782c254ced9bcdc0ba3b07c5de171ad68e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2823 Malicious code in eslint-plugin-pan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b81abbc1cbb8d6be5013b7086a11c782c254ced9bcdc0ba3b07c5de171ad68e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-seller-ui-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a2a70b6c59d84f180c6375345e6df311615b32f69cd6d6da58fd50cc54a12ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2826 Malicious code in eslint-plugin-seller-ui-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a2a70b6c59d84f180c6375345e6df311615b32f69cd6d6da58fd50cc54a12ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-kavak (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89ac6e77aa5aa6dec64f082bee8330aa686fd2d7d315dc1d474cbaaddbc1c7c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2819 Malicious code in eslint-plugin-kavak (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89ac6e77aa5aa6dec64f082bee8330aa686fd2d7d315dc1d474cbaaddbc1c7c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

compare-eslint-config (>=0.1.0, <=0.1.1) potentially affected by CVE-2020-7629 via install-package (0.1.0)

install-package NPM version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on install-package and may be impacted: - compare-eslint-config =0.1.0, =0.1.1 Source cves: CVE-2020-7629 Source advisory: OSV:GHSA-6M4R-M3GC-H4R5...

GHSA-PGJJ-866W-FC5C Risk of code injection

Impact Some routes use eval or Function constructor, which may be injected by the target site with unsafe code, causing server-side security issues Patches Temporarily removed the problematic route and added a no-new-func rule to eslint Self-built users should upgrade to 7f1c430 and later as soon...

eslint-plugin-mozilla (>=2.7.0, <=2.9.2), gatsby (>=2.24.6-telemetry-test.19, <=2.24.6-telemetry-test.20) +3 more potentially affected by CVE-2020-28448 via multi-ini (2.1.0)

multi-ini NPM version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on multi-ini and may be impacted: - eslint-plugin-mozilla =2.7.0, =2.24.6-telemetry-test.19, =2.12.64-telemetry-test.19, =0.1.54-telemetry-test.19, =1.3.21-telemetry-test.19,...

eslint-plugin-mozilla (>=2.7.0, <=2.9.2), gatsby (>=2.24.6-telemetry-test.19, <=2.24.6-telemetry-test.20) +3 more potentially affected by CVE-2020-28460 via multi-ini (2.1.0)

multi-ini NPM version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on multi-ini and may be impacted: - eslint-plugin-mozilla =2.7.0, =2.24.6-telemetry-test.19, =2.12.64-telemetry-test.19, =0.1.54-telemetry-test.19, =1.3.21-telemetry-test.19,...

GHSA-45W5-PVR8-4RH5 Command injection in eslint-fixer

The eslint-fixer package through 0.1.5 for Node.js allows command injection via shell metacharacters to the fix function. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. The ozum/eslint-fixer GitHub repository has been intentionally deleted...