1680 matches found
MAL-2025-41284 Malicious code in eslint-8 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fc62673366ae7ad1109086b5169030e17b4ed81be6735878522392329ebca48c The OpenSSF Package Analysis project identified 'eslint-8' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...
Malicious code in eslint-oldest (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f80ac33a577e9ac06744364bddec668b736dd3e0f4a48d532c2dbdcb368e21b0 The OpenSSF Package Analysis project identified 'eslint-oldest' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...
MAL-2025-41287 Malicious code in eslint-oldest (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f80ac33a577e9ac06744364bddec668b736dd3e0f4a48d532c2dbdcb368e21b0 The OpenSSF Package Analysis project identified 'eslint-oldest' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...
Malicious code in eslint-8.23 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d4e01b0c5206bd63f9c05e96300c4f8f6e2f5640c76f4742303f802da707471c The OpenSSF Package Analysis project identified 'eslint-8.23' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...
MAL-2025-41285 Malicious code in eslint-8.23 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d4e01b0c5206bd63f9c05e96300c4f8f6e2f5640c76f4742303f802da707471c The OpenSSF Package Analysis project identified 'eslint-8.23' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...
Malicious code in eslint-9 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7b6f571e9facdadc164a1e0a5ed2a298a233bbc3138ef7df78bae9d0a3d588a4 The OpenSSF Package Analysis project identified 'eslint-9' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...
MAL-2025-41286 Malicious code in eslint-9 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7b6f571e9facdadc164a1e0a5ed2a298a233bbc3138ef7df78bae9d0a3d588a4 The OpenSSF Package Analysis project identified 'eslint-9' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...
CVE-2025-57754
eslint-ban-moment is an Eslint plugin for final assignment in VIHU. In 3.0.0 and earlier, a sensitive Supabase URI is exposed in .env. A valid Supabase URI with embedded username and password will allow an attacker complete unauthorized access and control over database and user data. This could...
CVE-2025-57754 eslint-ban-moment exposed a sensitive Supabase URI in .env (Credential leak)
eslint-ban-moment is an Eslint plugin for final assignment in VIHU. In 3.0.0 and earlier, a sensitive Supabase URI is exposed in .env. A valid Supabase URI with embedded username and password will allow an attacker complete unauthorized access and control over database and user data. This could...
CVE-2025-57754 eslint-ban-moment exposed a sensitive Supabase URI in .env (Credential leak)
eslint-ban-moment is an Eslint plugin for final assignment in VIHU. In 3.0.0 and earlier, a sensitive Supabase URI is exposed in .env. A valid Supabase URI with embedded username and password will allow an attacker complete unauthorized access and control over database and user data. This could...
CVE-2025-57754
CVE-2025-57754 affects eslint-ban-moment (plugin for ESLint) with versions 3.0.0 and earlier. The root cause is exposure of a sensitive Supabase URI in the .env file, which, if valid and contains embedded credentials, can grant an attacker complete unauthorized access and control over the databas...
PT-2025-34243 · WordPress · Eslint-Ban-Moment
Name of the Vulnerable Software and Affected Versions: eslint-ban-moment versions 3.0.0 and earlier Description: The eslint-ban-moment plugin exposes a sensitive Supabase URI in the .env file. A valid Supabase URI containing a username and password grants an attacker complete unauthorized access...
eslint-ban-moment 安全漏洞
eslint-ban-moment is an application by the individual developer Kristófer Fannar Björnsson. A security vulnerability exists in eslint-ban-moment 3.0.0 and earlier versions, which originates from the exposure of sensitive Supabase URIs in .env files, which could lead to data exfiltration,...
Malicious code in @accessibility-insights/eslint-plugin (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 13389b293a7327d7df367607af4b7dea1b206ee10aecdb3c32bf093402b6247e The OpenSSF Package Analysis project identified...
MAL-2025-6899 Malicious code in @accessibility-insights/eslint-plugin (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 13389b293a7327d7df367607af4b7dea1b206ee10aecdb3c32bf093402b6247e The OpenSSF Package Analysis project identified...
Malicious code in eslint-plugin-i18n-scan (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 24f25e113ba45d8c8835196aef1b368f2a1e4fb1aecdc17e3a6d47db15371e04 The OpenSSF Package Analysis project identified...
MAL-2025-6929 Malicious code in eslint-plugin-i18n-scan (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 24f25e113ba45d8c8835196aef1b368f2a1e4fb1aecdc17e3a6d47db15371e04 The OpenSSF Package Analysis project identified...
Malicious code in eslint-config-i18n-scan (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 201f83a69c354c3a004e8b9fd7a778bba4540bc35b88fe6eeaac043b0d6dcd18 The OpenSSF Package Analysis project identified...
MAL-2025-6927 Malicious code in eslint-config-i18n-scan (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 201f83a69c354c3a004e8b9fd7a778bba4540bc35b88fe6eeaac043b0d6dcd18 The OpenSSF Package Analysis project identified...