News for hackers. Stuff that matters.

A comment on ESLint compromised, may have stolen your credentials.

Re:ESLint compromised, may have stolen your credentials by brodock on Thursday July 12, 2018 @01:12PM (#17516631)
Did anyone fill a CVE already?
[ Parent | on HN ]
Re:ESLint compromised, may have stolen your credentials by thephyber on Thursday July 12, 2018 @05:28PM (#17518770)
The CVE DB is usually pretty backlogged. This[1] is the defacto NPM "CVE DB" and describes the two modules[2][3] affected by this incident that ESLint and NPM acknowledge.

[1] https://nodesecurity.io/advisories

[2] https://nodesecurity.io/advisories/673

[3] https://nodesecurity.io/advisories/674

[ Parent | on HN ]