Was npmjs.org temporarily compromised?github.com/isaacs 3 pointsdbeardsl12 years ago1 commentSaveHideCopy link On HNComments−dbeardslOP12ytldr;During an npm install of the tar module I received this: npm http 200 https://registry.npmjs.org/tar npm ERR! registry error parsing json npm ERR! SyntaxError: Unexpected token y npm ERR! ny-leone-porn-sex-scene/Sunny-Leones-deleted-sex-scene-from-Ragini-MMS-2/photostory/33010796.cms"})^@9"},"������� Followed by the rest of the package.json from the module.Something or someone injected data into the response I got from npmjs.org. The fact that it was Isaac Schlueter's account is particularly worrisome.
Comments
tldr;
During an npm install of the tar module I received this:
Followed by the rest of the package.json from the module.Something or someone injected data into the response I got from npmjs.org. The fact that it was Isaac Schlueter's account is particularly worrisome.