News for hackers. Stuff that matters.
Re:ESLint compromised, may have stolen your credentials by lsadam0 on Thursday July 12, 2018 @09:43AM (#17514433)
I mean sure, the turn-around time is great...but how did this pass review in the first place? This should never happen in a reasonably managed project.
Re:ESLint compromised, may have stolen your credentials by andrew_ on Thursday July 12, 2018 @09:45AM (#17514455)
It wasn't up for review. It was published out of band, and outside of the ESLint pipeline using likely stolen credentials. That's how that stuff sneaks in.
Re:ESLint compromised, may have stolen your credentials by lsadam0 on Thursday July 12, 2018 @09:48AM (#17514487)
Ah, thanks for the clarification. At first I thought this made it through the actual release process.