Malicious code in rest-changelog-mini-css-extract-plugin-eslint-plugin (npm)

The package rest-changelog-mini-css-extract-plugin-eslint-plugin was found to contain malicious code...

MAL-2025-45820 Malicious code in rest-changelog-mini-css-extract-plugin-eslint-plugin (npm)

The package rest-changelog-mini-css-extract-plugin-eslint-plugin was found to contain malicious code...

MAL-2025-43952 Malicious code in deimos-eslint-plugin-remark-spica (npm)

The package deimos-eslint-plugin-remark-spica was found to contain malicious code...

MAL-2025-44172 Malicious code in eslint-plugin-miranda-karma-neutrino (npm)

The package eslint-plugin-miranda-karma-neutrino was found to contain malicious code...

MAL-2025-44171 Malicious code in eslint-plugin-gridsome-zenobia-sync (npm)

The package eslint-plugin-gridsome-zenobia-sync was found to contain malicious code...

MAL-2025-43200 Malicious code in @zalastax/nolb-eslint-plugin-b (npm)

The package @zalastax/nolb-eslint-plugin-b was found to contain malicious code...

MAL-2025-43203 Malicious code in @zalastax/nolb-eslint-plugin-e (npm)

The package @zalastax/nolb-eslint-plugin-e was found to contain malicious code...

MAL-2025-44173 Malicious code in eslint-plugin-outercore-mysql-io (npm)

The package eslint-plugin-outercore-mysql-io was found to contain malicious code...

Malicious code in eslint-plugin-rdv-insertion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b6a011f4c21be2958b339f3da564f192dce2329a2d29903a2b0f01933708d94a The OpenSSF Package Analysis project identified 'eslint-plugin-rdv-insertion' @ 7.99.99 npm as malicious. It is considered malicious because: -...

MAL-2025-42133 Malicious code in eslint-plugin-rdv-insertion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b6a011f4c21be2958b339f3da564f192dce2329a2d29903a2b0f01933708d94a The OpenSSF Package Analysis project identified 'eslint-plugin-rdv-insertion' @ 7.99.99 npm as malicious. It is considered malicious because: -...

MAL-2025-41977 Malicious code in eslint-plugin-react-purify (npm)

The package eslint-plugin-react-purify was found to contain malicious code...

Malicious code in eslint-plugin-dummy (npm)

The package eslint-plugin-dummy was found to contain malicious code...

MAL-2025-41976 Malicious code in eslint-plugin-dummy (npm)

The package eslint-plugin-dummy was found to contain malicious code...

Malicious code in eslint-plugin-aws-toolkits (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41975 Malicious code in eslint-plugin-aws-toolkits (npm)

The package communicates with a domain associated with malicious activity...

CVE-2025-57754

eslint-ban-moment is an Eslint plugin for final assignment in VIHU. In 3.0.0 and earlier, a sensitive Supabase URI is exposed in .env. A valid Supabase URI with embedded username and password will allow an attacker complete unauthorized access and control over database and user data. This could...

CVE-2025-57754 eslint-ban-moment exposed a sensitive Supabase URI in .env (Credential leak)

eslint-ban-moment is an Eslint plugin for final assignment in VIHU. In 3.0.0 and earlier, a sensitive Supabase URI is exposed in .env. A valid Supabase URI with embedded username and password will allow an attacker complete unauthorized access and control over database and user data. This could...

Malicious code in @accessibility-insights/eslint-plugin (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 13389b293a7327d7df367607af4b7dea1b206ee10aecdb3c32bf093402b6247e The OpenSSF Package Analysis project identified...

MAL-2025-6899 Malicious code in @accessibility-insights/eslint-plugin (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 13389b293a7327d7df367607af4b7dea1b206ee10aecdb3c32bf093402b6247e The OpenSSF Package Analysis project identified...

Malicious code in eslint-plugin-i18n-scan (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 24f25e113ba45d8c8835196aef1b368f2a1e4fb1aecdc17e3a6d47db15371e04 The OpenSSF Package Analysis project identified...