Re:ESLint compromised, may have stolen your credentials
by maaaats on Thursday July 12, 2018 @10:45AM
(#17515111)
It's part of the ESLint organization, which is what I'm referring to being compromised, not the exact package.
What you're saying is anyhow wrong as far as I can see. ESLint-scope is included by ESLint. Current version uses ^4.0.0 and shouldn't be affected, but versions from before May has the affected ^3.7.1 dependency.
This version is also included in webpack, making it a big target anyhow.
What you're saying is anyhow wrong as far as I can see. ESLint-scope is included by ESLint. Current version uses ^4.0.0 and shouldn't be affected, but versions from before May has the affected ^3.7.1 dependency. This version is also included in webpack, making it a big target anyhow.