Malicious code in eslint-plugin-rdv-insertion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b6a011f4c21be2958b339f3da564f192dce2329a2d29903a2b0f01933708d94a The OpenSSF Package Analysis project identified 'eslint-plugin-rdv-insertion' @ 7.99.99 npm as malicious. It is considered malicious because: -...

MAL-2025-42133 Malicious code in eslint-plugin-rdv-insertion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b6a011f4c21be2958b339f3da564f192dce2329a2d29903a2b0f01933708d94a The OpenSSF Package Analysis project identified 'eslint-plugin-rdv-insertion' @ 7.99.99 npm as malicious. It is considered malicious because: -...

Malicious code in eslint-detector (npm)

The package eslint-detector was found to contain malicious code...

Malicious code in react-eslint-type (npm)

The package react-eslint-type was found to contain malicious code...

Malicious code in eslint-plugin-dummy (npm)

The package eslint-plugin-dummy was found to contain malicious code...

MAL-2025-41974 Malicious code in eslint-detector (npm)

The package eslint-detector was found to contain malicious code...

MAL-2025-41976 Malicious code in eslint-plugin-dummy (npm)

The package eslint-plugin-dummy was found to contain malicious code...

MAL-2025-42064 Malicious code in react-eslint-type (npm)

The package react-eslint-type was found to contain malicious code...

MAL-2025-41977 Malicious code in eslint-plugin-react-purify (npm)

The package eslint-plugin-react-purify was found to contain malicious code...

Malicious code in eslint-plugin-aws-toolkits (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41975 Malicious code in eslint-plugin-aws-toolkits (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in eslint-validation-cli (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41556 Malicious code in eslint-validation-cli (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in eslint-ts-view (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41555 Malicious code in eslint-ts-view (npm)

--- -= Per source details. Do not edit below this line.=-...

@anarchitects/nx-js (>=0.0.1 <=0.0.3), @asd14/eslint-config (>=11.0.0 <=14.4.0) +76 more potentially affected by CVE-2025-10894 via nx (>=21.5.1-beta.3 <=21.7.0-canary.20250930-e144408)

nx NPM version =21.5.1-beta.3, =0.0.1, =11.0.0, =0.52.0, =2.23.0, =1.4.0, =3.1.1, =1.0.0, =6.10.0, =0.1.0-next.717, =9.0.0, =1.0.0, =0.0.1-alpha.7, =2.1.0 and more Source cves: CVE-2025-10894 Source advisory: OSV:MAL-2025-41443...

MAL-2025-41438 Malicious code in @nx/eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 28938ac9b6855425f3f452af308a0335a4dc5eb1c23ba08865c5cc5be914783e The nx project and associated plugins were compromised via a vulnerable GitHub workflow that allowed code injection and the theft of an NP...

@abelfubu/schematics (=0.1.1), @anarchitects/nx-js (>=0.0.1 <=0.0.3) +118 more potentially affected by CVE-2025-10894 via nx (>=21.0.0-beta.0 <=21.7.0-canary.20250930-e144408)

nx NPM version =21.0.0-beta.0, =0.0.1, =11.0.0, =0.21.0, =0.0.1, =2.23.0, =0.3.53, =0.0.5, =0.0.4, =1.3.0, =0.0.1, =0.0.1-alpha.4 and more Source cves: CVE-2025-10894 Source advisory: SNYK:JS-NX-12205542...

CVE-2025-57754

eslint-ban-moment is an Eslint plugin for final assignment in VIHU. In 3.0.0 and earlier, a sensitive Supabase URI is exposed in .env. A valid Supabase URI with embedded username and password will allow an attacker complete unauthorized access and control over database and user data. This could...

Malicious code in eslint-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fc62673366ae7ad1109086b5169030e17b4ed81be6735878522392329ebca48c The OpenSSF Package Analysis project identified 'eslint-8' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...