512 matches found
Malicious code in eslint-plugin-supertest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69e51e22e6032e74b136ec2615b38bd5801cca8f5a4ef8a09747a442b656ec17 The package eslint-plugin-supertest was found to contain malicious code. Source: ghsa-malware...
MAL-2026-100 Malicious code in eslint-plugin-supertest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69e51e22e6032e74b136ec2615b38bd5801cca8f5a4ef8a09747a442b656ec17 The package eslint-plugin-supertest was found to contain malicious code. Source: ghsa-malware...
EUVD-2026-1380
Malicious code in eslint-plugin-supertest npm...
EUVD-2025-199913
Malicious code in eslint-plugin-react-hooks-published npm...
MAL-2025-191346 Malicious code in @voiceflow/eslint-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67cd8ae1f7314aac775c05ede8c705af3cba9d1a6513674495b86e0fa1f822b4 The package @voiceflow/eslint-plugin was found to contain malicious code. Source: ghsa-malware...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
EUVD-2025-198735
Malicious code in @zapier/eslint-plugin-zapier npm...
Malicious code in @zapier/eslint-plugin-zapier (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4f3af0dfab295d120b932902816e065f092b48671909a971a2994cb3cb5afd6 The package @zapier/eslint-plugin-zapier was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-178549
Malicious code in hercules-css-loader-restart-eslint-plugin npm...
EUVD-2025-177876
Malicious code in metalsmith-eslint-plugin-proxima-update npm...
Malicious code in duplex-eslint-plugin-apex-taphonomy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2235332a5fb41e922702c24cc78cadd2f0764b74cdef1022c5fb1baebeda86a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in eslint-plugin-ophiuchus-pino-chromedriver (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72910fde647545178f4ccecb0cd7f8485357f83fd546d2c8329012ecdc9f34e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179968
Malicious code in browserify-eslint-plugin-heka-mui npm...
MAL-2025-188285 Malicious code in nightwatch-global-subduction-eslint-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6db5dca0a960c4affb7ee077ac8b2613cfe86d64f6224a89a259c25d733fcdf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186842 Malicious code in eslint-plugin-eslint-sails-membrane (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d9c8ddb23f24da56881beee4ee5fa6011c178ea702b512177758630c0ecfceb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186844 Malicious code in eslint-plugin-gacrux-wolf-ariel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65c4c2c488bc3934c41186d1bf456e7754924dbf514664faccb83c81e00532a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in perturbation-stratigraphy-eslint-plugin-fusion (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 072bd973cd0a6588ccee9353a969cc2ce090a9237b49a6635e495b5aef071c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175466
Malicious code in xo-nightmare-magellan-eslint-plugin npm...