Malicious code in @levvicode/eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 209977e14df4b690913958d1982a1e75028696bb11694e94608569237ab5688f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @levvicode/eslint-config

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-18471 Malicious code in @levvicode/eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 209977e14df4b690913958d1982a1e75028696bb11694e94608569237ab5688f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

scavenger_scanner

CVE-2025-54313 IOC Scanner Cross-platform scanners for detecting Indicators of Compromise IOCs related to the eslint-config-prettier supply chain attack CVE-2025-54313. On July 18, 2025, several popular npm packages were compromised through a phishing attack. The attacker gained access to the...

CLSA-2026-1792162002 TuxCare security update for @medplum/eslint-config (1 CVE)

TuxCare rebuilt @medplum/eslint-config to address 1 CVE. Fixed in 3.3.1-tuxcare.2...

PT-2026-124471

TuxCare rebuilt @medplum/eslint-config to address 1 CVE. Fixed in 3.3.1-tuxcare.2...

Malware in @saazkira/eslint-config

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-17835 Malicious code in @saazkira/eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 716e747d34d02e4d4b2d34558753e65ce26a72e086b5c2388427d22eb2b0e969 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @saazkira/eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 716e747d34d02e4d4b2d34558753e65ce26a72e086b5c2388427d22eb2b0e969 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @badzz88/eslint-config

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-17819 Malicious code in @badzz88/eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0eafa4b306df1ba72117512af8f1b676cd101c93bac67d887418f318b39efcc6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @badzz88/eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0eafa4b306df1ba72117512af8f1b676cd101c93bac67d887418f318b39efcc6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in eslint-config-compact-base

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview @badzz88/eslint-config is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

Malicious Package

Overview @saazkira/eslint-config is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Malicious Package

Overview asepxyz-eslint-config is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malware in asepxyz-eslint-config

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in asepxyz-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9e873795c4634852530066ca11f554da84043934f246df7b3edbe868ea343ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17734 Malicious code in asepxyz-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9e873795c4634852530066ca11f554da84043934f246df7b3edbe868ea343ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview eslint-config-epic is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...