Babel-eslint: Please update eslint-scope
Hi,
About an hour ago [email protected] has been released. This is a hacked version which steals the npm credentials and sends them to remote server.
Relevant discussion:
https://github.com/eslint/eslint-scope/issues/39
Please update to eslint-scope 4.0.0 or pin the version to 3.7.1 since there is not going to be any patch release.
Cheers,
Andrej
pronebird
All 8 comments
We (the ESLint team) are working on unpublishing 3.7.2 (it was not published by us, some of our credentials must have been compromised).
As @pronebird noted, we don't plan on publishing anything in the 3.7.x line, so you could pin to 3.7.1 if you're not ready to consume 4.0.0.
Apologies for the inconvenience.
platinumazure
on 12 Jul 2018
I created #657 to expedite the process. Hopefully that helps.
It will still need a package version bump to make the change public though.
neverendingqs
on 12 Jul 2018
@neverendingqs you probably mean #657. Thanks for this! 馃憤
pronebird
on 12 Jul 2018
Dang just woke up, I think we need this for the 8.x branch then as well?
hzoo
on 12 Jul 2018
@hzoo not sure if you already use 4.0 in 8.x branch or not. If anything below then yes. On the other side, 3.7.2 has already been unpublished so it may be a little too late :)
pronebird
on 12 Jul 2018
Yeah might as well I guess. Did 8.2.6 and 9.0.0-beta.3
hzoo
on 12 Jul 2018
@hzoo fun times 馃槃
designjockey
on 12 Jul 2018
lol, ya I'm tired.
For reference/resolution: https://twitter.com/geteslint/status/1017509669701603328
hzoo
on 12 Jul 2018
Related issues
gabaum10
路
3Comments
doodlewind
路
5Comments
babel-bot
路
3Comments
NotTooReact89
路
5Comments
AuthorProxy
路
6Comments
Most helpful comment
We (the ESLint team) are working on unpublishing 3.7.2 (it was not published by us, some of our credentials must have been compromised).
As @pronebird noted, we don't plan on publishing anything in the 3.7.x line, so you could pin to 3.7.1 if you're not ready to consume 4.0.0.
Apologies for the inconvenience.