Malicious code in stylelint-config-promo (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3061 Malicious code in stylelint-config-promo (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in odyssey-stylelint (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2784 Malicious code in odyssey-stylelint (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3062 Malicious code in @realty-front/stylelint-plugins (npm)

--- -= Per source details. Do not edit below this line.=-...

Stylelint has vulnerability in semver dependency

Summary Our meow dependency which we use for our CLI depended on [email protected] . A vulnerability in this version of semver was recently identified and surfaced by npm audit: Regular Expression Denial of Service - https://github.com/advisories/GHSA-c2qf-rxjj-qqgw Details Original post by the...

GHSA-F7XJ-RG7H-MC87 Stylelint has vulnerability in semver dependency

Summary Our meow dependency which we use for our CLI depended on [email protected] . A vulnerability in this version of semver was recently identified and surfaced by npm audit: Regular Expression Denial of Service - https://github.com/advisories/GHSA-c2qf-rxjj-qqgw Details Original post by the...

Malicious Package

Overview stylelint-config-prism is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

MAL-2023-8006 Malicious code in @pagseguro/stylelint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx a77a0e8f023eb828ca6897ba36220e030972b11f244c8f48c031c928e5342367 Malicious packages campaign since 2021 targeting developers, steals source code and secrets...

Malicious Package

Overview @realty-front/stylelint-plugins is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable i...

Malicious Package

Overview stylelint-config-promo is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious code in stylelint-config-monorepo-palantir (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecfb730b36f0aca48113362cb642f678cec4071963a3b1ffaff7590164c55371 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6340 Malicious code in stylelint-config-monorepo-palantir (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecfb730b36f0aca48113362cb642f678cec4071963a3b1ffaff7590164c55371 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stylelint-config-pagseguro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdbce31670f09e920545167d2fa96d32d7cafe6b0ef66a9ab928d3ce311dc82b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6341 Malicious code in stylelint-config-pagseguro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdbce31670f09e920545167d2fa96d32d7cafe6b0ef66a9ab928d3ce311dc82b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stylelint-bem-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8b27f9be233ba1e0a20cd29efbd9d6a2b5982651dee648523dd66d48ee7ea09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6339 Malicious code in stylelint-bem-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8b27f9be233ba1e0a20cd29efbd9d6a2b5982651dee648523dd66d48ee7ea09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Inefficient Regular Expression Complexity in stylelint/stylelint

Description I would like to report a Regular Expression Denial of Service ReDoS vulnerability in stylelint. It allows causing a denial of service when calling function isKeyframeSelector. Proof of Concept // PoC.js var isKeyframeSelector = require"stylelint/lib/utils/isKeyframeSelector" forvar i ...