npm
Malicious eslint-plugin-skyscanner-dates @99.0.5
Vulnerability report · Last retrieved from osv.dev July 19, 2026 at 3:07 AM UTC
OSV ID
MAL-2026-3202
Ecosystem
npm
Summary
The package eslint-plugin-skyscanner-dates was found to contain malicious code.
Source: amazon-inspector (0fa3152c92c23ebec42990f14c77642de971e5a5464b0e7c25ecdea012ac81e4)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.