512 matches found
MAL-2023-8596 Malicious code in eslint-plugin-discord (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4707252020cd550543cb451c800321561d678699d3436d86de8dacbb22c6c32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in eslint-plugin-blade (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aae9177af783553501be9b3995cd5eebfa3a3aaef47e65237aa9f29e4630b64d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8404 Malicious code in eslint-plugin-blade (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aae9177af783553501be9b3995cd5eebfa3a3aaef47e65237aa9f29e4630b64d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @spgy/eslint-plugin-spgy-fe (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f153ed03ad775543b9a2c5ba45f744fdb6dc3bdd3de7734a273488881a1353a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8167 Malicious code in @spgy/eslint-plugin-spgy-fe (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f153ed03ad775543b9a2c5ba45f744fdb6dc3bdd3de7734a273488881a1353a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in eslint-plugin-ironfish (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ddb571e2a90d22e958b983fe2578c4dc66915310367953568399aa68773cc77a The OpenSSF Package Analysis project identified 'eslint-plugin-ironfish' @ 1.0.1 npm as malicious. It is considered malicious because: - The...
MAL-2023-1437 Malicious code in eslint-plugin-ironfish (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ddb571e2a90d22e958b983fe2578c4dc66915310367953568399aa68773cc77a The OpenSSF Package Analysis project identified 'eslint-plugin-ironfish' @ 1.0.1 npm as malicious. It is considered malicious because: - The...
Malicious code in eslint-plugin-scp-custom-rules (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8860b8044f2adb9c969cdcf764976c8f9e110be9d0b0a03d095998595aec3938 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-1033 Malicious code in eslint-plugin-scp-custom-rules (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8860b8044f2adb9c969cdcf764976c8f9e110be9d0b0a03d095998595aec3938 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in eslint-plugin-artsy (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 489558294cd82cf59cd5486f7ce3fce82ec6c7baf9aaf9ba1edda5a1abf792a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-312 Malicious code in eslint-plugin-artsy (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 489558294cd82cf59cd5486f7ce3fce82ec6c7baf9aaf9ba1edda5a1abf792a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in eslint-plugin-indeed (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cd3cf0dfdda3ea0bf705d385efb05c56b971a408c4a0dceef3771d2e474a33e0 The OpenSSF Package Analysis project identified 'eslint-plugin-indeed' @ 99.99.9 npm as malicious. It is considered malicious because: - The...
MAL-2023-5 Malicious code in eslint-plugin-indeed (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cd3cf0dfdda3ea0bf705d385efb05c56b971a408c4a0dceef3771d2e474a33e0 The OpenSSF Package Analysis project identified 'eslint-plugin-indeed' @ 99.99.9 npm as malicious. It is considered malicious because: - The...
Malicious Package
Overview eslint-plugin-yandex-morda-views is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable ...
MAL-2023-4 Malicious code in eslint-plugin-dropbox-sign (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef0b78a956b34b6e0c3db65f1f623e28b0e80753ffae8ea19c75e4217f1dc0b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in eslint-plugin-hermione-serp (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e7d7f41a51ee9bfecbef8bf69e148220d60868373587d28c800ac1acb3e0112 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-313 Malicious code in eslint-plugin-hermione-serp (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e7d7f41a51ee9bfecbef8bf69e148220d60868373587d28c800ac1acb3e0112 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview eslint-plugin-automation-custom is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable i...
Malicious code in eslint-plguin-babel (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36e78eaa156f38aa85f12f0f238cd06c69b1630c00dbdd3b9a44b1c936b848b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in eslint-plwgin-stdnard (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e4bd8aff7beb430ed17e653b5a5617bd79482688ae7947419d4faf2bd38892b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...