News for hackers. Stuff that matters.

A comment on ESLint compromised, may have stolen your credentials.

Re:ESLint compromised, may have stolen your credentials by hownowbrowncow on Thursday July 12, 2018 @01:35PM (#17516835)
Update: NPM is revoking _all_ tokens between 2018-07-11 00:00 UTC and 2018-07-12 12:30 UTC.

https://status.npmjs.org/incidents/dn7c1fgrr7ng

[ Parent | on HN ]
Re:ESLint compromised, may have stolen your credentials by seldo on Thursday July 12, 2018 @01:55PM (#17517023)
Further clarifying: npm will revoke all tokens issued before 2018-07-12 12:30 UTC. If you rolled your tokens after that time you will not need to re-issue them.

https://status.npmjs.org/incidents/dn7c1fgrr7ng

[ Parent | on HN ]
Re:ESLint compromised, may have stolen your credentials by hownowbrowncow on Thursday July 12, 2018 @01:37PM (#17516851)
See also: https://gist.github.com/localjo/59bb12b7a4789e01e3782cf8a103...

Good to make sure you team members who might have installed within that time period nuke out all their node_modules.

[ Parent | on HN ]