GHSA-PV55-R6J3-WP94 Malicious Package in eslint-config-eslint

Version 5.0.2 of eslint-config-eslint was published without authorization and was found to contain malicious code. This code would read the users .npmrc file and send any found authentication tokens to a remote server. Recommendation The best course of action if you found this package installed i...

PT-2020-21445

Name of the Vulnerable Software and Affected Versions eslint-config-eslint version 5.0.2 Description The issue concerns malicious code in version 5.0.2 of eslint-config-eslint, which reads the user's .npmrc file and sends any found authentication tokens to a remote server. Recommendations For...

Malicious JavaScript Package Detection

Detection and reporting of known malicious JavaScript packages or package versions. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...