If your npm is up-to-date it would have provided a critical warning about the us... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

holmberd on July 12, 2018 | parent | context | favorite | on: ESLint compromised, may have stolen your credentia...

If your npm is up-to-date it would have provided a critical warning about the use of eval in that code.

bradyd on July 12, 2018 [–]

Can you give some more information on this? Is this part of the npm-audit feature?

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact