1703 matches found
EUVD-2025-111195
Malicious code in meteor-nconf-eslint-orbit npm...
MAL-2025-141366 Malicious code in cygnus-eslint-changelog-sedna (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbd0a5eb751aa64e3f278a17e2fd11e36e71dc42534e16ded7a9fdb74443fdfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in eslint-plugin-despina-xanthus-ultra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94066a462de6a40ad0b3d6847519d8baee54111207505b5664c8c283d362ff05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149231 Malicious code in vulcan-eslint-plugin-aurora-deneb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8dfbca6d0d69647c5f5463eab5bb90e64d9e2b01eae0083cd94d966cfe894c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142424 Malicious code in farout-sails-eslint-config-chariklo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5350b546b48ac29a1dcbeddbd48f6a6bf51e9bc12a6a2bab1c78cfd8c5566f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113874
Malicious code in eslint-plugin-phoebe-chariklo-pegasus npm...
EUVD-2025-37070
Malicious code in eslint-config-epic npm...
Malicious code in eslint-config-epic (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54a940b131e34a7fd4881d3b0bed0278b40743fa28bb8aa336df89830a6b038d The package eslint-config-epic was found to contain malicious code...
MAL-2025-49223 Malicious code in eslint-config-epic (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54a940b131e34a7fd4881d3b0bed0278b40743fa28bb8aa336df89830a6b038d The package eslint-config-epic was found to contain malicious code...
MAL-2025-48996 Malicious code in eslint-disable-next-line (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c260c70270e5f716b6e8197913327633d64aa0ee2e18ebde88c8f53f06893c62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-36767
Malicious code in eslint-disable-next-line npm...
EUVD-2025-36773
Malicious code in eslint-plugin-cli-microsoft365 npm...
Malicious code in eslint-plugin-cli-microsoft365 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0037031e005128b7ab89b1941901718b4890000f9a202f62e6d49f45102762dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48998 Malicious code in eslint-plugin-cli-microsoft365 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0037031e005128b7ab89b1941901718b4890000f9a202f62e6d49f45102762dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in eslint-github-bot (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e04576802856f7074d803ef7546dfd6b0e548ceee7429ad5dfe39b153b3e756d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-36779
Malicious code in eslint-github-bot npm...
MAL-2025-48997 Malicious code in eslint-github-bot (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e04576802856f7074d803ef7546dfd6b0e548ceee7429ad5dfe39b153b3e756d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in eslint-plugin-custom-eslint-rules (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 290264bf054a89de7b611685ab2f5a9720fd03d6e90c3631d42bbef29259ec48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview eslint-github-bot is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...