Malicious Package

Overview stylelint-config-promo is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious code in stylelint-config-monorepo-palantir (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecfb730b36f0aca48113362cb642f678cec4071963a3b1ffaff7590164c55371 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6340 Malicious code in stylelint-config-monorepo-palantir (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecfb730b36f0aca48113362cb642f678cec4071963a3b1ffaff7590164c55371 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stylelint-config-pagseguro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdbce31670f09e920545167d2fa96d32d7cafe6b0ef66a9ab928d3ce311dc82b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6341 Malicious code in stylelint-config-pagseguro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdbce31670f09e920545167d2fa96d32d7cafe6b0ef66a9ab928d3ce311dc82b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stylelint-bem-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8b27f9be233ba1e0a20cd29efbd9d6a2b5982651dee648523dd66d48ee7ea09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6339 Malicious code in stylelint-bem-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8b27f9be233ba1e0a20cd29efbd9d6a2b5982651dee648523dd66d48ee7ea09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Inefficient Regular Expression Complexity in stylelint/stylelint

Description I would like to report a Regular Expression Denial of Service ReDoS vulnerability in stylelint. It allows causing a denial of service when calling function isKeyframeSelector. Proof of Concept // PoC.js var isKeyframeSelector = require"stylelint/lib/utils/isKeyframeSelector" forvar i ...