ts-eslinter@1.0.0

Summary

Package name resembles common ESLint/TypeScript tooling and the main entry index.js contains base64 decoding via Buffer.from(..., 'base64').toString('utf8') at line 7 (with another Buffer.from at line 86). Base64 decoding of an embedded string is a common precursor to obfuscated payload execution, but it is also used for many legitimate purposes (config blobs, asset embedding, default keys). Without traced execution showing the decoded bytes being eval'd, executed via child_process, or sent over the network, intent cannot be confirmed from the available evidence. The name is also close to legitimate linter packages, which warrants a human look.

Source: amazon-inspector (56fe794783cf855aba4980f7186b85866fd3048cbb97803fe8c575192cb30d44)