Re:ESLint compromised, may have stolen your credentials
by void_starer on Thursday July 12, 2018 @11:58AM
(#17515840)
> I've grepped my entire local code base for 'eval' and 'pastebin'; I seem to be fine.
I don't know if I'm missing something, but couldn't they have easily called it indirectly like this: console.log(global["ev" + "al"]("40 + 2")); I tested it here: http://rextester.com/FEPVG53848
I don't know if I'm missing something, but couldn't they have easily called it indirectly like this: console.log(global["ev" + "al"]("40 + 2")); I tested it here: http://rextester.com/FEPVG53848