EUVD-2025-116728

Malicious code in andromeda-config-eslint-alphard npm...

EUVD-2025-30109

Malicious code in bioql PyPI...

Malware in @art-ws/config-eslint

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-47372 Malicious code in @art-ws/config-eslint (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b89332826cb57152a8288941846a48e6ecb1d8d979bf641a288f740c34a0b99 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in paleomagnetism-config-eslint-terraforming (npm)

The package paleomagnetism-config-eslint-terraforming was found to contain malicious code...

GHSA-PV55-R6J3-WP94 Malicious Package in eslint-config-eslint

Version 5.0.2 of eslint-config-eslint was published without authorization and was found to contain malicious code. This code would read the users .npmrc file and send any found authentication tokens to a remote server. Recommendation The best course of action if you found this package installed i...

PT-2020-21445

Name of the Vulnerable Software and Affected Versions eslint-config-eslint version 5.0.2 Description The issue concerns malicious code in version 5.0.2 of eslint-config-eslint, which reads the user's .npmrc file and sends any found authentication tokens to a remote server. Recommendations For...

Malicious JavaScript Package Detection

Detection and reporting of known malicious JavaScript packages or package versions. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...