News for hackers. Stuff that matters.

A comment on ESLint compromised, may have stolen your credentials.

Re:ESLint compromised, may have stolen your credentials by nodesocket on Thursday July 12, 2018 @06:21PM (#17519101)
Why go through the effort of evalin' the result of pastebin.com/raw/XLeVP82h? Why not just put the resulting code from pastebin directly into the suspicious file?
[ Parent | on HN ]
Re:ESLint compromised, may have stolen your credentials by mygo on Thursday July 12, 2018 @09:09PM (#17519843)
because this way they can change the code to be executed on the fly outside of npm
[ Parent | on HN ]