Skip to content
OpenAdvisories

Package · npm

eslint-config-eslint

2 known vulnerabilities.

2 results · Feed

  • Critical —

    Malicious Package in eslint-config-eslint

    Version 5.0.2 of `eslint-config-eslint` was published without authorization and was found to contain malicious code. This code would read the users `.npmrc` file and send any found authentication tokens to a remote server. ## Recommendation The best course of…

  • Critical 9.1

    Malicious Package in eslint-scope

    Version 3.7.2 of `eslint-scope` was published without authorization and was found to contain malicious code. This code would read the users `.npmrc` file and send any found authentication tokens to 2 remote servers. ## Recommendation The best course of action…