Hostile 100% javascript Download

eslint-config-minecraft-scripting 19.9.9

Mature hollow package advertises default index entrynpm package has empty description
SHA-256d724d958660410ee6b98fe173c5a929571c10c7cc5130e61c3e71a1bd3487160
URLhttps://registry.npmjs.org/eslint-config-minecraft-scripting/-/eslint-config-minecraft-scripting-19.9.9.tgz
MaleculeO(S₂)Md(Pa₃)

Also flagged by osv (MAL-2026-634: Malicious code in eslint-config-minecraft-scripting (npm)) +2 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.