Malicious code in stylelint-function-url-no-domain (npm)

The package stylelint-function-url-no-domain was found to contain malicious code...

Malicious code in stylelint-config-data-ui (npm)

The package stylelint-config-data-ui was found to contain malicious code...

MAL-2025-34125 Malicious code in stylelint-config-toolbox (npm)

The package stylelint-config-toolbox was found to contain malicious code...

MAL-2025-34127 Malicious code in stylelint-polaris (npm)

The package stylelint-polaris was found to contain malicious code...

MAL-2025-7075 Malicious code in @amber-team/stylelint-config (npm)

The package @amber-team/stylelint-config was found to contain malicious code...

Malicious code in stylelint-recommended-conf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7140ae1a4cb350ca4bafc3879dbea50e300d52d841b5334bcb2f297713a4cc5a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5520 Malicious code in stylelint-recommended-conf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7140ae1a4cb350ca4bafc3879dbea50e300d52d841b5334bcb2f297713a4cc5a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stylelint-fix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbe442bbd2c1150c0a47f6b07e96536f93337a9f509f9ee7891a040a0a7c26f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4891 Malicious code in stylelint-fix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbe442bbd2c1150c0a47f6b07e96536f93337a9f509f9ee7891a040a0a7c26f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stylelint-config-promo (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3061 Malicious code in stylelint-config-promo (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2784 Malicious code in odyssey-stylelint (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in odyssey-stylelint (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3062 Malicious code in @realty-front/stylelint-plugins (npm)

--- -= Per source details. Do not edit below this line.=-...

@rocketmakers/prettier-config (>=1.0.1, <=2.1.0), @rocketmakers/stylelint-config (>=1.0.1, <=2.1.0) potentially affected by CVE-2024-1899 via showdown (2.0.1)

showdown NPM version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on showdown and may be impacted: - @rocketmakers/prettier-config =1.0.1, =1.0.1, =2.1.0 Source cves: CVE-2024-1899 Source advisory: OSV:GHSA-RMMH-P597-PPVV...

GHSA-F7XJ-RG7H-MC87 Stylelint has vulnerability in semver dependency

Summary Our meow dependency which we use for our CLI depended on [email protected] . A vulnerability in this version of semver was recently identified and surfaced by npm audit: Regular Expression Denial of Service - https://github.com/advisories/GHSA-c2qf-rxjj-qqgw Details Original post by the...

Stylelint has vulnerability in semver dependency

Summary Our meow dependency which we use for our CLI depended on [email protected] . A vulnerability in this version of semver was recently identified and surfaced by npm audit: Regular Expression Denial of Service - https://github.com/advisories/GHSA-c2qf-rxjj-qqgw Details Original post by the...

Malicious Package

Overview stylelint-config-prism is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

MAL-2023-8006 Malicious code in @pagseguro/stylelint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx a77a0e8f023eb828ca6897ba36220e030972b11f244c8f48c031c928e5342367 Malicious packages campaign since 2021 targeting developers, steals source code and secrets...

Malicious Package

Overview @realty-front/stylelint-plugins is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable i...