Research
Using Trusted Protocols Against You: Gmail as a C2 Mechanism
Socket uncovers malicious packages on PyPI using Gmail's SMTP protocol for command and control (C2) to exfiltrate data and execute commands.
By Olivia Brown - Apr 30, 2025
📅 You're Invited: Meet the Socket team at RSAC (April 28 – May 1).RSVP →
@eslint-react/shared
Advanced tools
100
Supply Chain Security
100
Vulnerability
70
Quality
96
Maintenance
100
License
The README file is missing
v1.42.1 (2025-04-08)
✨ New
- feat: rename
corepreset toxby @Rel1cx in https://github.com/Rel1cx/eslint-react/pull/1042
📝 Changes you should be aware of
The following presets have been renamed:
coretoxcore-legacytox-legacy
The old preset names will still be available until the next major update to avoid breaking changes.
Full Changelog: https://github.com/Rel1cx/eslint-react/compare/v1.41.0...v1.42.1
FAQs
Package last updated on 08 Apr 2025
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Related posts
Product
A New Overview in our Dashboard
We redesigned Socket's first logged-in page to display rich and insightful visualizations about your repositories protected against supply chain threats.
By André Staltz - Apr 29, 2025
Product
Introducing Socket Fix for Safe, Automated Dependency Upgrades
Automatically fix and test dependency updates with socket fix—a new CLI tool that turns CVE alerts into safe, automated upgrades.
By John-David Dalton - Apr 25, 2025