510 matches found
EUVD-2025-121328
Malicious code in testcafe-promise-eslint-plugin-canopus npm...
EUVD-2025-120612
Malicious code in webdriver-manager-eslint-plugin-stream-private npm...
EUVD-2025-113883
Malicious code in eslint-plugin-carina-telesto-got npm...
EUVD-2025-122548
Malicious code in restart-changelog-heka-eslint-plugin npm...
MAL-2025-142217 Malicious code in eslint-enif-webpack-event (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1ed194f599f2836a83fef2b6e825f59f54b15e81de0a8f75e18e895572a8a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142243 Malicious code in eslint-plugin-tailwindcss-cosmiconfig-alphard (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e8afdb64b20c818f81c4e664f57f0d63604e0f039189a3fb71f2106206e9cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141796 Malicious code in draco-spectron-webdriver-nashira-eslint-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0da7c3d576d83e54ed8f3ec17a17754a6a137239e745e659438cd861b60b1e66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123164
Malicious code in public-eslint-plugin-blitz-init npm...
EUVD-2025-115926
Malicious code in buffer-virgo-eslint-plugin-centauri npm...
EUVD-2025-113866
Malicious code in eslint-plugin-thuban-firebase-centauri npm...
MAL-2025-142225 Malicious code in eslint-plugin-apollo-supervisor-aquarius (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c97c4417371354dc864ac05316ad3f9ffd6bf4a85eeec03dd87dd816e428dc88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145289 Malicious code in native-eslint-plugin-style-loader-got (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 695578aca503670b9eb6a321181bc50f0975204771e573cde2aeddbbde25ea65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in eslint-plugin-cli-microsoft365 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0037031e005128b7ab89b1941901718b4890000f9a202f62e6d49f45102762dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-36773
Malicious code in eslint-plugin-cli-microsoft365 npm...
MAL-2025-48998 Malicious code in eslint-plugin-cli-microsoft365 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0037031e005128b7ab89b1941901718b4890000f9a202f62e6d49f45102762dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in eslint-plugin-custom-eslint-rules (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 290264bf054a89de7b611685ab2f5a9720fd03d6e90c3631d42bbef29259ec48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48999 Malicious code in eslint-plugin-custom-eslint-rules (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 290264bf054a89de7b611685ab2f5a9720fd03d6e90c3631d42bbef29259ec48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview eslint-plugin-custom-eslint-rules is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...