
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
@eslint-community/eslint-utils
Advanced tools
This package provides utility functions and classes for make ESLint custom rules.
For examples:
getStaticValue evaluates static value on AST.ReferenceTracker checks the members of modules/globals as handling assignments and destructuring.See documentation.
See releases.
Welcome contributing!
Please use GitHub's Issues/PRs.
npm run test-coverage runs tests and measures coverage.npm run clean removes the coverage result of npm run test-coverage command.npm run coverage shows the coverage result of the last npm run test-coverage command.npm run lint runs ESLint.npm run watch runs tests on each file change.ESLint is a tool for identifying and reporting on patterns found in ECMAScript/JavaScript code. It is highly configurable and can be extended with custom rules and plugins. While @eslint-community/eslint-utils provides utilities for working with ESLint, ESLint itself is the core tool for linting JavaScript code.
eslint-plugin-import is a plugin that provides linting rules for validating proper imports. It helps ensure that import statements are valid and follow best practices. While @eslint-community/eslint-utils provides general utilities for ESLint, eslint-plugin-import focuses specifically on import/export syntax.
eslint-plugin-react is a plugin that provides linting rules for React applications. It helps enforce best practices and catch common issues in React code. While @eslint-community/eslint-utils provides general utilities for ESLint, eslint-plugin-react focuses specifically on React.
FAQs
Utilities for ESLint plugins.
The npm package @eslint-community/eslint-utils receives a total of 43,873,436 weekly downloads. As such, @eslint-community/eslint-utils popularity was classified as popular.
We found that @eslint-community/eslint-utils demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.