
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
@open-xchange/eslint-config-frontend-standard
Advanced tools
This is meta npm module contains a standard configuration for linting. Adding this module makes sure that all projects are using the same version of ESLint as well as the same basic rules, which results in a more streamlined codebase.
The following packages are already part of the configuration:
To start using this configuration, a few steps are needed:
eslint as well as the packages above from the list abovepnpm remove @eslint/eslintrc @vue/eslint-config-standard eslint eslint-config-standard eslint-plugin-chai-friendly eslint-plugin-codeceptjs eslint-plugin-import eslint-plugin-jsdoc eslint-plugin-license-header eslint-plugin-mocha eslint-plugin-n eslint-plugin-promise eslint-plugin-vue
pnpm add @open-xchange/eslint-config-frontend-standard
.npmrc [^1]echo "public-hoist-pattern[]=*eslint*" >> .npmrc
Although
eslintis inpublic-hoist-patternby default, it gets manually added here to prevent overwriting it.
eslint.config.jsecho "import frontendStandard from '@open-xchange/eslint-config-frontend-standard'
export default [
...frontendStandard,
]" > eslint.config.js
package.json to prevent warnings."pnpm": {
"peerDependencyRules": {
"allowedVersions": {
"eslint": "9",
"eslint-plugin-n": "17"
}
}
}
eslint.rc to the new flat config format in the eslint.config.js. For help and references see the official migration guide.Customizing the configuration means adding rules or plugins to the eslint.config.js. To do this please refer to the documentation.
FAQs
Meta package for eslint and common plugins
The npm package @open-xchange/eslint-config-frontend-standard receives a total of 5 weekly downloads. As such, @open-xchange/eslint-config-frontend-standard popularity was classified as not popular.
We found that @open-xchange/eslint-config-frontend-standard demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 14 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.