MAL-2024-10971 Malicious code in eslint-plugin-fulfillment-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e13e5cce992af1b2b7a1e02743ee91170011bb71fc2d80bb7831eecd99538a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-video (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bdf9d5e311913d5fe92de7d7fb0dc219cd197a54b6433cc4b5420ed9b1190f16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10973 Malicious code in eslint-plugin-video (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bdf9d5e311913d5fe92de7d7fb0dc219cd197a54b6433cc4b5420ed9b1190f16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-locale (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67ff7ec8f2f163238502829fc2a5fef209c1c5a8cf9d14d0b4820b1433278a81 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10972 Malicious code in eslint-plugin-locale (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67ff7ec8f2f163238502829fc2a5fef209c1c5a8cf9d14d0b4820b1433278a81 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-21539

Versions of the package @eslint/plugin-kit before 0.2.3 are vulnerable to Regular Expression Denial of Service ReDoS due to improper input sanitization. An attacker can increase the CPU usage and crash the program by exploiting this vulnerability...

CVE-2024-21539

Versions of the package @eslint/plugin-kit before 0.2.3 are vulnerable to Regular Expression Denial of Service ReDoS due to improper input sanitization. An attacker can increase the CPU usage and crash the program by exploiting this vulnerability...

Regular Expression Denial of Service (ReDoS) in @eslint/plugin-kit

Crafting a very large and well crafted string can increase the CPU usage and crash the program. POC js const ConfigCommentParser = require"@eslint/plugin-kit"; var str = ""; for var i = 0; i 1000000; i++ str += " "; str += "A"; console.log"start" var parser = new ConfigCommentParser;...

@2digits/eslint-config (>=2.6.0 <=2.7.0), @2digits/eslint-plugin (>=2.2.9 <=2.3.0) +37 more potentially affected by CVE-2024-21539 via @eslint/plugin-kit (=0.1.0)

@eslint/plugin-kit NPM version =0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @eslint/plugin-kit and may be impacted: - @2digits/eslint-config =2.6.0, =2.2.9, =0.0.133, =1.23.46, =2.0.1, =20240910.35.32, =13.2.8, =2024.3.44, =2024.3.45 -...

GHSA-7Q7G-4XM8-89CQ Regular Expression Denial of Service (ReDoS) in @eslint/plugin-kit

Crafting a very large and well crafted string can increase the CPU usage and crash the program. POC js const ConfigCommentParser = require"@eslint/plugin-kit"; var str = ""; for var i = 0; i 1000000; i++ str += " "; str += "A"; console.log"start" var parser = new ConfigCommentParser;...

Malicious code in eslint-plugin-wms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4b20357cf95acf41bc1718eeb796b29f01f318a9874d59cd4ef1a87dd4cadc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10665 Malicious code in eslint-plugin-wms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4b20357cf95acf41bc1718eeb796b29f01f318a9874d59cd4ef1a87dd4cadc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10664 Malicious code in eslint-plugin-unusedvar-fix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2a5ddb66be17d69ec5984d63784684b3865c8a316f79aef7f59107336182947 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-ssc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cd44b1dc2a7c0a52132eee12cd12dfc07abdf093ae71052bfac7ea29771b985 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10663 Malicious code in eslint-plugin-ssc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cd44b1dc2a7c0a52132eee12cd12dfc07abdf093ae71052bfac7ea29771b985 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-shopee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a491d7ca4f79d0761b84a5784731279e82a28cf0aa3be6840e20b003a2543ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10662 Malicious code in eslint-plugin-shopee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a491d7ca4f79d0761b84a5784731279e82a28cf0aa3be6840e20b003a2543ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-module-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware afc57b3b316c94a93252629b2c608c1e0dfd28fa51024ff8e2957db8efb8d48b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10661 Malicious code in eslint-plugin-module-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware afc57b3b316c94a93252629b2c608c1e0dfd28fa51024ff8e2957db8efb8d48b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-mark-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3454a8e6853853d2148cad33c350ce65ee8d66082f3b5f9f85c6fa8d2936d6fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...