npm - OSV

MAL-2026-18471

npm/@levvicode/eslint-config

Malicious code in @levvicode/eslint-config (npm) 2 days ago

No fix available

GHSA-h4fr-cmh5-qr62

crates.io/fallow-cli
crates.io/fallow-config
crates.io/fallow-core
npm/@fallow-cli/fallow-node
npm/fallow

Fallow: A `.*` glob segment let an analyzed repository make Fallow test paths... 23 Oct

Fix available
Severity - 3.3 (Low)

MAL-2026-18107

npm/nwfp-build-config

Malicious code in nwfp-build-config (npm) 20 Oct

No fix available

MAL-2026-17835

npm/@saazkira/eslint-config

Malicious code in @saazkira/eslint-config (npm) 12 Oct

No fix available

MAL-2026-17819

npm/@badzz88/eslint-config

Malicious code in @badzz88/eslint-config (npm) 12 Oct

No fix available

MAL-2026-17762

npm/@coopeuch/config

Malicious code in @coopeuch/config (npm) 11 Oct

No fix available

MAL-2026-17734

npm/asepxyz-eslint-config

Malicious code in asepxyz-eslint-config (npm) 09 Oct

No fix available

MAL-2026-17690

npm/@galicia-toolkit/spa-build-config

Malicious code in @galicia-toolkit/spa-build-config (npm) 08 Oct

No fix available

MAL-2026-17274

npm/@hrmony/pladddform-config

Malicious code in @hrmony/pladddform-config (npm) 29 Sep

No fix available

MAL-2026-17250

npm/@hrmony/api-gateway-service-config

Malicious code in @hrmony/api-gateway-service-config (npm) 29 Sep

No fix available

MAL-2026-17184

npm/@airbnb-extended/typescript-config

Malicious code in @airbnb-extended/typescript-config (npm) 25 Sep

No fix available

MAL-2026-17157

npm/eslint-config-compact-base

Malicious code in eslint-config-compact-base (npm) 24 Sep

No fix available

MAL-2026-16417

npm/eslint-config-compact-utils

Malicious code in eslint-config-compact-utils (npm) 22 Sep

No fix available

MAL-2026-16370

npm/@uol-afiliados/affiliated-config-lib

Malicious code in @uol-afiliados/affiliated-config-lib (npm) 21 Sep

No fix available

MAL-2026-16352

npm/@baanx/blockchain-config

Malicious code in @baanx/blockchain-config (npm) 21 Sep

No fix available

MAL-2026-16221

npm/bender-rspack-config

Malicious code in bender-rspack-config (npm) 15 Sep

No fix available

Vulnerabilities