510 matches found
MAL-2026-1729 Malicious code in eslint-plugin-superhuman-custom-rules (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e50258e14acd3712854f3059d043b8c4982563ab8d401555b253702a3212279 The package eslint-plugin-superhuman-custom-rules was found to contain malicious code...
MAL-2026-522 Malicious code in magento-coding-standard-eslint-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 181566f148b6cac8ad613b2942849254b7a6968bbe5e16a9d009aaa8e4184b25 The package magento-coding-standard-eslint-plugin was found to contain malicious code. Source: ghsa-malware...
MAL-2026-323 Malicious code in eslint-plugin-fuel-react (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99675eb06a245907c7a2133cf7d75af3037229a059d0a135bf8c3d518432a6a4 The package eslint-plugin-fuel-react was found to contain malicious code. Source: ossf-package-analysis...
Malicious code in eslint-plugin-fuel-react (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99675eb06a245907c7a2133cf7d75af3037229a059d0a135bf8c3d518432a6a4 The package eslint-plugin-fuel-react was found to contain malicious code. Source: ossf-package-analysis...
MAL-2026-100 Malicious code in eslint-plugin-supertest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69e51e22e6032e74b136ec2615b38bd5801cca8f5a4ef8a09747a442b656ec17 The package eslint-plugin-supertest was found to contain malicious code. Source: ghsa-malware...
Malicious code in eslint-plugin-supertest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69e51e22e6032e74b136ec2615b38bd5801cca8f5a4ef8a09747a442b656ec17 The package eslint-plugin-supertest was found to contain malicious code. Source: ghsa-malware...
EUVD-2026-1380
Malicious code in eslint-plugin-supertest npm...
Malicious Package
Overview eslint-plugin-supertest is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...
EUVD-2025-199913
Malicious code in eslint-plugin-react-hooks-published npm...
MAL-2025-191346 Malicious code in @voiceflow/eslint-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67cd8ae1f7314aac775c05ede8c705af3cba9d1a6513674495b86e0fa1f822b4 The package @voiceflow/eslint-plugin was found to contain malicious code. Source: ghsa-malware...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
EUVD-2025-198735
Malicious code in @zapier/eslint-plugin-zapier npm...
Malicious code in @zapier/eslint-plugin-zapier (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4f3af0dfab295d120b932902816e065f092b48671909a971a2994cb3cb5afd6 The package @zapier/eslint-plugin-zapier was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-178710
Malicious code in glaciology-nconf-eslint-plugin-farout npm...
EUVD-2025-179038
Malicious code in eslint-plugin-gacrux-wolf-ariel npm...
Malicious code in perturbation-stratigraphy-eslint-plugin-fusion (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 072bd973cd0a6588ccee9353a969cc2ce090a9237b49a6635e495b5aef071c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177717
Malicious code in mysql-spectron-webdriver-primatology-eslint-plugin npm...
EUVD-2025-179039
Malicious code in eslint-plugin-fornax-auth-dactyl npm...