News for hackers. Stuff that matters.

A comment on ESLint compromised, may have stolen your credentials. Parent comment

Re:ESLint compromised, may have stolen your credentials by RussianCow on Thursday July 12, 2018 @01:59PM (#17517065)
On the contrary, `eval` is used so little in real code that it's easy to detect. A tiny, obfuscated VM would be much more difficult.
[ Parent | on HN ]
Re:ESLint compromised, may have stolen your credentials by mygo on Thursday July 12, 2018 @09:05PM (#17519835)
‘eval’ is not trivial to detect when it’s

window[rot13("riny")]("console.log('lol')");

or one of the many other ways to obfuscate eval

[ Parent | on HN ]