> tokens were invalidated at 2018-07-12 12:30 UTC I'm reading it as tokens created before 2018-07-12 12:30 UTC were invalidated, but the invalidation itself ha

> tokens were invalidated at 2018-07-12 12:30 UTC I'm reading it as tokens created before 2018-07-12 12:30 UTC were invalidated, but the invalidation itself happened on 2018-07-12 18:42 UTC according to eslint's post-mortem[1]. I think the latter is the more relevant date. [1] https://eslint.org/blog/2018/07/postmortem-for-malicious-package-publishes https://eslint.org/blog/2018/07/postmortem-for-malicious-pac...