4 ms·

You also need to report this to security@npmjs.com so they post an advisory [1] and mark the existing versions as vulnerable. [1] - https://www.npmjs.com/advis

by q3k 8y ago

You also need to report this to security@npmjs.com so they post an advisory [1] and mark the existing versions as vulnerable. [1] - https://www.npmjs.com/advisories https://www.npmjs.com/advisories

Sephr 8y ago
Anyone, including yourself can do that.
- cat199 8y ago
  or, the person who should do it should do it and not rely on others to do their job for them?
  - danr4 8y ago
    it's not their job. there's a reason anyone can do it.
- rarecoil 8y ago
  Everyone's talking about it but nobody did it, so I did.