1 threat
Most recently published first
The npm package eslint-config-googlejs-es6 version 1.0.1 contains malicious code that installs a dependency from a custom domain. This dependency executes an information stealer during installation, targeting npm, git, and CI/CD tokens.
Page 1 of 1