ESLint compromised, may have stolen your credentials

Re:ESLint compromised, may have stolen your credentials by brlewis on Thursday July 12, 2018 @03:58PM (#17518116)

Here's how I checked my own machine, though I was already confident I wouldn't be affected:

  find ~ -name eslint-scope -exec grep -H version '{}/package.json' \;

If you use yarn exclusively, this will also work:

  yarn cache list | grep eslint-scope-3.7.2

[ Parent | on HN ]

Re:ESLint compromised, may have stolen your credentials by ethagnawl on Thursday July 12, 2018 @04:58PM (#17518545)

Thanks for sharing this snippet. It looks like the "bad" version of eslist-scope found its way into the Heroku CLI. SMDH.

[ Parent | on HN ]