Skip to content
OpenAdvisories

Package · npm

eslint-scope

1 known vulnerabilities.

1 result · Feed

  • Critical 9.1

    Malicious Package in eslint-scope

    Version 3.7.2 of `eslint-scope` was published without authorization and was found to contain malicious code. This code would read the users `.npmrc` file and send any found authentication tokens to 2 remote servers. ## Recommendation The best course of action…