# @typescript-eslint/utils@8.70.0 security report (npm)

- Verdict: **No issues** (risk level: safe)
- Scanned: 2026-10-06T14:13:28.000Z
- Files reviewed: 39
- Findings: no findings
- Report: https://security.togoder.click/npm/@typescript-eslint/utils
- Source: Togoder Security (https://security.togoder.click), AI source-code review

## Summary

Togoder Security scanned the npm package @typescript-eslint/utils@8.70.0 on Oct 6, 2026. An AI review of 39 source files produced no findings. No malicious behavior, install-time payloads, credential theft or exfiltration were identified.

## Findings

No findings.

## Files reviewed

- `dist/ast-utils/eslint-utils/PatternMatcher.js` (safe): The file is a standard TypeScript-compiled re-export shim that surfaces eslint-utils' PatternMatcher class and contains no malicious patterns.
- `dist/ast-utils/eslint-utils/ReferenceTracker.js` (safe): No malicious patterns detected; the file is a standard TypeScript-compiled re-export of eslint-utils ReferenceTracker with no network, filesystem, process, or credential access.
- `dist/ast-utils/eslint-utils/astUtilities.js` (safe): No malicious patterns detected in this TypeScript-compiled eslint utility re-export module.
- `dist/ast-utils/eslint-utils/index.js` (safe): This is a standard TypeScript compilation helper file for re-exporting modules from eslint-utils, containing only common __createBinding and __exportStar helper functions with no malicious patterns.
- `dist/ast-utils/eslint-utils/predicates.js` (safe): This is a standard TypeScript-compiled re-export module that only forwards ESLint utility predicate functions from @eslint-community/eslint-utils with no malicious patterns.
- `dist/ast-utils/eslint-utils/scopeAnalysis.js` (safe): No malicious patterns detected
- `dist/ast-utils/helpers.js` (safe): No malicious patterns detected
- `dist/ast-utils/index.js` (safe): No malicious patterns detected; this is standard TypeScript/CommonJS module re-export boilerplate generated by the TypeScript compiler.
- `dist/ast-utils/misc.js` (safe): No malicious patterns detected
- `dist/ast-utils/predicates.js` (safe): No malicious patterns detected; the file contains only type predicate utility functions with no network, filesystem, process, or dynamic code execution activity.
- `dist/eslint-utils/InferTypesFromRule.js` (safe): The file contains only a 'use strict' directive, an Object.defineProperty call for exports, and a source map comment, with no malicious patterns.
- `dist/eslint-utils/RuleCreator.js` (safe): No malicious patterns detected; the file is a benign ESLint rule-creator utility with no network, filesystem, process, or dynamic-code behavior.
- `dist/eslint-utils/applyDefault.js` (safe): No malicious patterns detected
- `dist/eslint-utils/deepMerge.js` (safe): Cleared by Jev triage; no further analysis needed
- `dist/eslint-utils/getParserServices.js` (safe): No malicious patterns detected
- `dist/eslint-utils/index.js` (safe): No malicious patterns detected; the file only contains standard TypeScript/CommonJS re-export helpers and relative module imports.
- `dist/eslint-utils/nullThrows.js` (safe): No malicious patterns detected; the file contains a simple null assertion utility with no network, filesystem, process, or dynamic code execution behavior.
- `dist/eslint-utils/parserSeemsToBeTSESLint.js` (safe): No malicious patterns detected
- `dist/index.js` (safe): No malicious patterns detected; this is a standard TypeScript-compiled barrel file re-exporting local modules.
- `dist/json-schema.js` (safe): No malicious patterns detected
- `dist/ts-eslint/AST.js` (safe): No malicious patterns detected
- `dist/ts-eslint/Config.js` (safe): No malicious patterns detected
- `dist/ts-eslint/ESLint.js` (safe): No malicious patterns detected
- `dist/ts-eslint/Linter.js` (safe): No malicious patterns detected; the file is a simple TypeScript re-export wrapper around ESLint's Linter class with no dynamic code execution, network, filesystem, or process activity.
- `dist/ts-eslint/Parser.js` (safe): No malicious patterns detected
- `dist/ts-eslint/ParserOptions.js` (safe): No malicious patterns detected
- `dist/ts-eslint/Processor.js` (safe): No malicious patterns detected
- `dist/ts-eslint/Rule.js` (safe): No malicious patterns detected
- `dist/ts-eslint/RuleTester.js` (safe): This is a minimal, benign file that simply re-exports a deprecated RuleTester class extending ESLint's official RuleTester; no malicious patterns detected.
- `dist/ts-eslint/Scope.js` (safe): No malicious patterns detected; the code is standard TypeScript ESLint Scope re-export boilerplate using safe module import helpers.
- `dist/ts-eslint/SourceCode.js` (safe): No malicious patterns detected
- `dist/ts-eslint/eslint/ESLintShared.js` (safe): No malicious patterns detected; the file is a trivial module stub with only strict mode and export marker.
- `dist/ts-eslint/eslint/FlatESLint.js` (safe): No malicious patterns detected
- `dist/ts-eslint/eslint/LegacyESLint.js` (safe): No malicious patterns detected
- `dist/ts-eslint/index.js` (safe): No malicious patterns detected
- `dist/ts-estree.js` (safe): No malicious patterns detected
- `dist/ts-utils/NoInfer.js` (safe): No malicious patterns detected
- `dist/ts-utils/index.js` (safe): No malicious patterns detected; the file is standard TypeScript compiler helper code re-exporting local modules.
- `dist/ts-utils/isArray.js` (safe): No malicious patterns detected

AI analysis is guidance, not a guarantee. Methodology: https://security.togoder.click/methodology