Malicious code in eslint-plugin-relay-internal (npm)

The package eslint-plugin-relay-internal was found to contain malicious code...

MAL-2025-11332 Malicious code in @zalastax/nolb-eslint-plugin-p (npm)

The package @zalastax/nolb-eslint-plugin-p was found to contain malicious code...

MAL-2025-32704 Malicious code in sass-loader-redgiant-acamar-eslint-plugin (npm)

The package sass-loader-redgiant-acamar-eslint-plugin was found to contain malicious code...

MAL-2025-23741 Malicious code in jest-eslint-plugin-fomalhaut-quasar (npm)

The package jest-eslint-plugin-fomalhaut-quasar was found to contain malicious code...

MAL-2025-11336 Malicious code in @zalastax/nolb-eslint-plugin-t (npm)

The package @zalastax/nolb-eslint-plugin-t was found to contain malicious code...

MAL-2025-11329 Malicious code in @zalastax/nolb-eslint-plugin-m (npm)

The package @zalastax/nolb-eslint-plugin-m was found to contain malicious code...

MAL-2025-19862 Malicious code in eslint-plugin-restart-vega-soap (npm)

The package eslint-plugin-restart-vega-soap was found to contain malicious code...

MAL-2025-27338 Malicious code in neutronstar-higgs-spawn-eslint-plugin (npm)

The package neutronstar-higgs-spawn-eslint-plugin was found to contain malicious code...

MAL-2025-11323 Malicious code in @zalastax/nolb-eslint-plugin-g (npm)

The package @zalastax/nolb-eslint-plugin-g was found to contain malicious code...

Malicious code in eslint-plugin-react_editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 091ef657bc115b400dc3d8cd65691df53caef85fa307f52d627aac4d50120a77 The OpenSSF Package Analysis project identified 'eslint-plugin-reacteditor' @ 71.71.72 npm as malicious. It is considered malicious because: - T...

MAL-2025-6812 Malicious code in eslint-plugin-react_editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 091ef657bc115b400dc3d8cd65691df53caef85fa307f52d627aac4d50120a77 The OpenSSF Package Analysis project identified 'eslint-plugin-reacteditor' @ 71.71.72 npm as malicious. It is considered malicious because: - T...

Malicious code in productboard-eslint-plugin-relay (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 50a95e4b008863c195930bcd301dd1f243002839a301a5be5d0078cab7b22786 The OpenSSF Package Analysis project identified...

MAL-2025-6023 Malicious code in eslint-plugin-prettier (npm)

This package installs a windows based malware file node-gyp.dll via install.js...

Malicious code in eslint-plugin-prettier (npm)

This package installs a windows based malware file node-gyp.dll via install.js...

@-xun/symbiote (>=3.7.0, <=4.11.4), @0x57/pierre (>=0.0.3, <=0.0.16) +893 more potentially affected by unknown CVE via @eslint/plugin-kit (>=0.1.0, <=0.2.8)

@eslint/plugin-kit NPM version =0.1.0, =3.7.0, =0.0.3, =1.1.44, =1.1.14, =0.0.1-alpha.3, =0.0.1, =10.0.0, =10.0.0, =8.3.0, =13.0.0, =2.6.0, =2.2.9, =0.0.2, =35.0.1, =38.0.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-XFFM-G5W8-QVG7...

Malicious code in @shadowmonarchx/eslint_plugin_react (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68a575ed67cd813fc81aec32ae29e2e8672e85158eebc9e3a07face9ed576247 Any computer that has this package installed or running should be considered...

MAL-2025-5553 Malicious code in eslint-plugin-vhtml-slptypography (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05c2dc490463e3766704c773cd700c70323c52566cd3658a9acbdf5273f06655 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-vhtml-slptypography (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05c2dc490463e3766704c773cd700c70323c52566cd3658a9acbdf5273f06655 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5280 Malicious code in eslint-plugin-gpuweb-cts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f89e00c1a962e9633dd4aec668c01f211d133f98f097a23064f4d3a4f0f9bfc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-gpuweb-cts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f89e00c1a962e9633dd4aec668c01f211d133f98f097a23064f4d3a4f0f9bfc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...