“ESLint configuration used by Next.js.”
Local reference
Suspicious dependency
Inferred
Mal-ecule
K(Li)H(Os₂)Md(Pa₄)
Referenced by 5 samples
Well-known
notable severity, 96% confident.
lib/web
Next.js npm archive repository
Micro-behaviors
notable severity, 90% confident.
os/api-resolution
Requires the Node module builtin
notable severity, 93% confident.
os/module
CommonJS side-effect-only package require
baseline severity, 80% confident.
data/source/syntax
Reads an array element into a variable
Metadata
notable severity, 85% confident.
package/dependencies
Package has at least eight runtime deps
notable severity, 90% confident.
package/manifest
Repository URL uses owner/project coordinate
notable severity, 90% confident.
package/quality
Package is React ESLint config
baseline severity, 80% confident.
file/profile
English function-word token "and"
baseline severity, 100% confident.
package
package.json defines a package version
baseline severity, 95% confident.
package/files
Manifest sits at npm publish root
Identity
| SHA-256 | 82fb4eb4df227423894ab99cd8d26deeaeb36388f63385370ef2b4c0aa605c64 |
|---|---|
| Canonical SHA-256 | 323c89646f7f9525fc9c6f92d3115b7f962ce1b237d951e6d8cecd69f87c848c |
| Filename | [email protected] |
| Package | eslint-config-next |
| Version | 14.2.4 |
| PURL | pkg:npm/[email protected] |
Origin
| Source | x |
|---|---|
| Feed | supplychainattack.org |
| Ecosystem | javascript |
| Domain | npmjs.org |
| URL | https://registry.npmjs.org/eslint-config-next/-/eslint-config-next-14.2.4.tgz |
Timeline
| First seen | 2 Aug 2026 23:05 UTC |
|---|---|
| First analyzed | 2 Aug 2026 23:06 UTC |
| Last analyzed | 24 Aug 2026 14:41 UTC |
| Last updated | 24 Aug 2026 14:43 UTC |
Labeling
| Label | unknown |
|---|---|
| Traits version | 2b189 |
Not seeing what you expected? Let us know