Dependency Alert: eslint-plugin-click-ui may contain Malicious Code (MAL-2026-7280)

[faulty13]

Dependency Alert: eslint-plugin-click-ui may contain Malicious Code (MAL-2026-7280)

Security Alert

As of 7 July 2026, the package eslint-plugin-click-ui was identified as containing malicious code and has been removed from npm by the security team.

References

• OSV Advisory MAL-2026-7280

• Corgea Advisory

• npm Registry Status

Current Status

The package is now a security holding placeholder on npm. Any projects with this dependency should remove it immediately.

Recommended Action

Please remove eslint-plugin-click-ui from this repository's dependencies.