Malicious code in eslint-plugin-fulfillment-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e13e5cce992af1b2b7a1e02743ee91170011bb71fc2d80bb7831eecd99538a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-finance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd21cba796237ee635a3e8cfe55b14df360eb1cafcfdcf99c297d35f4ec2e77d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-classification-import (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf941eb64cb46effcedb0a7bc56e9aa2c3a16f53b93efc19baecb91bc6699f02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10969 Malicious code in eslint-plugin-classification-import (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf941eb64cb46effcedb0a7bc56e9aa2c3a16f53b93efc19baecb91bc6699f02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10971 Malicious code in eslint-plugin-fulfillment-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e13e5cce992af1b2b7a1e02743ee91170011bb71fc2d80bb7831eecd99538a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10970 Malicious code in eslint-plugin-finance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd21cba796237ee635a3e8cfe55b14df360eb1cafcfdcf99c297d35f4ec2e77d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-video (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bdf9d5e311913d5fe92de7d7fb0dc219cd197a54b6433cc4b5420ed9b1190f16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10973 Malicious code in eslint-plugin-video (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bdf9d5e311913d5fe92de7d7fb0dc219cd197a54b6433cc4b5420ed9b1190f16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10972 Malicious code in eslint-plugin-locale (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67ff7ec8f2f163238502829fc2a5fef209c1c5a8cf9d14d0b4820b1433278a81 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-locale (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67ff7ec8f2f163238502829fc2a5fef209c1c5a8cf9d14d0b4820b1433278a81 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-21539

Versions of the package @eslint/plugin-kit before 0.2.3 are vulnerable to Regular Expression Denial of Service ReDoS due to improper input sanitization. An attacker can increase the CPU usage and crash the program by exploiting this vulnerability...

CVE-2024-21539

Versions of the package @eslint/plugin-kit before 0.2.3 are vulnerable to Regular Expression Denial of Service ReDoS due to improper input sanitization. An attacker can increase the CPU usage and crash the program by exploiting this vulnerability...

@2digits/eslint-config (>=2.6.0, <=2.7.0), @2digits/eslint-plugin (>=2.2.9, <=2.3.0) +37 more potentially affected by CVE-2024-21539 via @eslint/plugin-kit (0.1.0)

@eslint/plugin-kit NPM version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @eslint/plugin-kit and may be impacted: - @2digits/eslint-config =2.6.0, =2.2.9, =0.0.133, =1.23.46, =2.0.1, =20240910.35.32, =13.2.8, =2024.3.44, =2024.3.45 -...

Regular Expression Denial of Service (ReDoS) in @eslint/plugin-kit

Crafting a very large and well crafted string can increase the CPU usage and crash the program. POC js const ConfigCommentParser = require"@eslint/plugin-kit"; var str = ""; for var i = 0; i 1000000; i++ str += " "; str += "A"; console.log"start" var parser = new ConfigCommentParser;...

GHSA-7Q7G-4XM8-89CQ Regular Expression Denial of Service (ReDoS) in @eslint/plugin-kit

Crafting a very large and well crafted string can increase the CPU usage and crash the program. POC js const ConfigCommentParser = require"@eslint/plugin-kit"; var str = ""; for var i = 0; i 1000000; i++ str += " "; str += "A"; console.log"start" var parser = new ConfigCommentParser;...

Malicious code in eslint-plugin-wms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4b20357cf95acf41bc1718eeb796b29f01f318a9874d59cd4ef1a87dd4cadc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10665 Malicious code in eslint-plugin-wms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4b20357cf95acf41bc1718eeb796b29f01f318a9874d59cd4ef1a87dd4cadc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10664 Malicious code in eslint-plugin-unusedvar-fix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2a5ddb66be17d69ec5984d63784684b3865c8a316f79aef7f59107336182947 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-ssc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cd44b1dc2a7c0a52132eee12cd12dfc07abdf093ae71052bfac7ea29771b985 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10663 Malicious code in eslint-plugin-ssc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cd44b1dc2a7c0a52132eee12cd12dfc07abdf093ae71052bfac7ea29771b985 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...