eslint-config-sdk

{"modified":"2026-03-19T12:23:19Z","published":"2025-12-27T20:20:29Z","schema_version":"1.7.4","id":"MAL-2025-192952","summary":"Malicious code in eslint-config-sdk (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (e71714baca3a4619a8482f00c00fbed0efcca855796a70e740d4f53a3f807003)\nThe package eslint-config-sdk was found to contain malicious code.\n\n## Source: ossf-package-analysis (f555787a619d1fb5f878d4d2bc13ec29597ef72d472ef1c2897a92de23ec1662)\nThe OpenSSF Package Analysis project identified 'eslint-config-sdk' @ 101.0.1 (npm) as malicious.\n\nIt is considered malicious because:\n\n- The package communicates with a domain associated with malicious activity.\n","affected":[{"package":{"ecosystem":"npm","name":"eslint-config-sdk"},"versions":["101.0.1","101.0.4","1.0.0","1.0.1","1.1.2","1.1.3","99.0.0","100.0.0","101.0.2","101.0.3"]}],"credits":[{"name":"Amazon Inspector","type":"FINDER","contact":["actran@amazon.com"]},{"name":"OpenSSF: Package Analysis","type":"FINDER","contact":["https://github.com/ossf/package-analysis","https://openssf.slack.com/channels/package_analysis"]},{"name":"ReversingLabs","type":"FINDER","contact":["https://www.reversinglabs.com"]}],"database_specific":{"malicious-packages-origins":[{"source":"ossf-package-analysis","sha256":"f555787a619d1fb5f878d4d2bc13ec29597ef72d472ef1c2897a92de23ec1662","import_time":"2025-12-27T20:37:59.702239224Z","modified_time":"2025-12-27T20:20:29Z","versions":["101.0.1"]},{"source":"ossf-package-analysis","sha256":"957e494a4b9c9985c6f16f935729cea70631deadb9f0e96f5b1dfa6675dc31bb","import_time":"2025-12-28T17:37:24.323029539Z","modified_time":"2025-12-28T17:25:34Z","versions":["101.0.4"]},{"source":"amazon-inspector","sha256":"e71714baca3a4619a8482f00c00fbed0efcca855796a70e740d4f53a3f807003","import_time":"2026-01-02T21:35:49.047194821Z","modified_time":"2026-01-02T21:29:26Z","versions":["101.0.1","101.0.4"]},{"source":"reversing-labs","sha256":"394c5581f84c76ebac0325559f81088ed9f64d89d59c08d74ac47b4005bd3ff9","import_time":"2026-03-19T12:18:49.982022054Z","id":"RLMA-2026-01296","modified_time":"2026-03-18T12:49:27Z","versions":["1.0.0","1.0.1","1.1.2","1.1.3","99.0.0","100.0.0","101.0.1","101.0.2","101.0.3","101.0.4"]}]}}