510 matches found
CVE-2025-57754
eslint-ban-moment is an Eslint plugin for final assignment in VIHU. In 3.0.0 and earlier, a sensitive Supabase URI is exposed in .env. A valid Supabase URI with embedded username and password will allow an attacker complete unauthorized access and control over database and user data. This could...
CVE-2025-57754 eslint-ban-moment exposed a sensitive Supabase URI in .env (Credential leak)
eslint-ban-moment is an Eslint plugin for final assignment in VIHU. In 3.0.0 and earlier, a sensitive Supabase URI is exposed in .env. A valid Supabase URI with embedded username and password will allow an attacker complete unauthorized access and control over database and user data. This could...
Malicious code in @accessibility-insights/eslint-plugin (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 13389b293a7327d7df367607af4b7dea1b206ee10aecdb3c32bf093402b6247e The OpenSSF Package Analysis project identified...
MAL-2025-6899 Malicious code in @accessibility-insights/eslint-plugin (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 13389b293a7327d7df367607af4b7dea1b206ee10aecdb3c32bf093402b6247e The OpenSSF Package Analysis project identified...
MAL-2025-6929 Malicious code in eslint-plugin-i18n-scan (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 24f25e113ba45d8c8835196aef1b368f2a1e4fb1aecdc17e3a6d47db15371e04 The OpenSSF Package Analysis project identified...
Malicious code in eslint-plugin-i18n-scan (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 24f25e113ba45d8c8835196aef1b368f2a1e4fb1aecdc17e3a6d47db15371e04 The OpenSSF Package Analysis project identified...
Malicious code in carina-cluster-dotenv-eslint-plugin (npm)
The package carina-cluster-dotenv-eslint-plugin was found to contain malicious code...
Malicious code in eslint-plugin-virtru-lint (npm)
The package eslint-plugin-virtru-lint was found to contain malicious code...
Malicious code in phenomic-spica-augmentedreality-eslint-plugin (npm)
The package phenomic-spica-augmentedreality-eslint-plugin was found to contain malicious code...
Malicious code in @zalastax/nolb-eslint-plugin-n (npm)
The package @zalastax/nolb-eslint-plugin-n was found to contain malicious code...
Malicious code in @zalastax/nolb-eslint-plugin-s (npm)
The package @zalastax/nolb-eslint-plugin-s was found to contain malicious code...
MAL-2025-11326 Malicious code in @zalastax/nolb-eslint-plugin-j (npm)
The package @zalastax/nolb-eslint-plugin-j was found to contain malicious code...
MAL-2025-31282 Malicious code in query-kuiperbelt-blitz-eslint-plugin (npm)
The package query-kuiperbelt-blitz-eslint-plugin was found to contain malicious code...
MAL-2025-19850 Malicious code in eslint-plugin-automation-custom (npm)
The package eslint-plugin-automation-custom was found to contain malicious code...
MAL-2025-19860 Malicious code in eslint-plugin-react-internal (npm)
The package eslint-plugin-react-internal was found to contain malicious code...
Malicious code in eslint-plugin-aether-phenomic-redis (npm)
The package eslint-plugin-aether-phenomic-redis was found to contain malicious code...
Malicious code in eslint-plugin-automation-custom (npm)
The package eslint-plugin-automation-custom was found to contain malicious code...
Malicious code in @zalastax/nolb-eslint-plugin-u (npm)
The package @zalastax/nolb-eslint-plugin-u was found to contain malicious code...