Re:ESLint compromised, may have stolen your credentials
by vlucas on Thursday July 12, 2018 @10:30AM
(#17514962)
This is not _eslint_. This is _eslint-scope_ which is not included by default with ESLint itself.
[ Parent
| on HN ]
Re:ESLint compromised, may have stolen your credentials
by maaaats on Thursday July 12, 2018 @10:45AM
(#17515111)
It's part of the ESLint organization, which is what I'm referring to being compromised, not the exact package.
What you're saying is anyhow wrong as far as I can see. ESLint-scope is included by ESLint. Current version uses ^4.0.0 and shouldn't be affected, but versions from before May has the affected ^3.7.1 dependency. This version is also included in webpack, making it a big target anyhow.
Re:ESLint compromised, may have stolen your credentials
by minitech on Thursday July 12, 2018 @02:52PM
(#17517518)
> This is _eslint-scope_ which is not included by default with ESLint itself.
Yeah, it is.
Re:ESLint compromised, may have stolen your credentials
by henry_flower on Thursday July 12, 2018 @02:47PM
(#17517489)
are you sure?
$ json -j version dependencies.eslint-scope < `npm root -g`/eslint/package.json
{
"version": "4.19.1",
"dependencies.eslint-scope": "^3.7.1"
}