Malicious code in eslint-config-crowdstrike (npm)

Suspicious postinstall script executing bundle.js combined with unsignedbitwisemathexcess YARA rule match indicates potential malware. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5700b3786b16cd76be2c86bc19af1fd76ac0dbfa6bb16f29e3837fc94598b75 Any computer that...

eslint-config-crowdstrike-node (=4.0.0-beta.2) potentially affected by unknown CVE via eslint-config-crowdstrike (=11.0.0-beta.0)

eslint-config-crowdstrike NPM version =11.0.0-beta.0 is affected by a known vulnerability. The following packages have a transitive dependency on eslint-config-crowdstrike and may be impacted: - eslint-config-crowdstrike-node =4.0.0-beta.2 Source cves: unknown CVE Source advisory:...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...