eslint-config-prettier npm package compromised

(stepsecurity.io)

24 points | by varunsharma07 8 hours ago

2 comments

  • warmedcookie 1 minute ago
    Hit me. Disables security in Chrome. I will be wiping everything. Changed passwords already, but I assume they stole everything.
  • varunsharma07 8 hours ago
    This widely-used package, which helps developers maintain consistent code formatting by turning off ESLint rules that conflict with Prettier, appears to have had multiple versions published with suspicious modifications.