3 ms·

Here is the official response from npm: http://blog.npmjs.org/post/169432444640/npm-operational-incident-6-jan-2018 http://blog.npmjs.org/post/169432444640/npm

by uallo 9y ago

Here is the official response from npm: http://blog.npmjs.org/post/169432444640/npm-operational-incident-6-jan-2018 http://blog.npmjs.org/post/169432444640/npm-operational-inci... TL;DR: "no malicious actors were involved in yesterday’s incident, and the security of npm users’ accounts and the integrity of these 106 packages were never jeopardized." A more detailed report will follow in the next days.

mohsen1 9y ago
They are claiming issue is resolved while I'm still not seeing a package my package is depending on https://github.com/mohsen1/json-formatter-js/pull/58#issuecomment-355840929 https://github.com/mohsen1/json-formatter-js/pull/58#issueco...
- uallo 9y ago
  I've never used pinkie before. But according to its GitHub page, there is no version 2.0.5: https://github.com/floatdrop/pinkie https://github.com/floatdrop/pinkie It seems that someone took over the package during its absence from npm and deployed a version 2.0.5. Maybe to avoid any malicious takeover. But there is no version 2.0.5 anymore.