» npm install eslint-plugin-prettier
Malware published in eslint-config-prettier and other packages
How do you guys add prettier to vite reactjs project with typescript? (eslint v9)
Cannot for the life of me make a react project that uses eslint, but doesn't use prettier
Why use prettier if ESLint can format?
Videos
» npm install eslint-plugin-prettier-vue
From the tweet:
cc @geteslint @PrettierCode @PrettierESLint
Attention!!!
I was tricked by a phishing email and a new npm token was added and leaked then some popular packages I'm maintaining were released with malicious software, I've deleted the leaked token and marked all affected bad versions as deprecated and released new versions.
All affected packages and versions are:
eslint-config-prettier
8.10.1
9.1.1
10.1.6
10.1.7
eslint-plugin-prettier:
4.2.2
4.2.3
snyckit:
0.11.9
@pkgr/core:
0.2.8
napi-postinstall:
0.3.1
–--
Reminder: if you are publishing npm packages, go to https://www.npmjs.com/settings/<YOUR_USERNAME>/tfa/list and change your 2FA method from Authenticator App to Security Key and create a passkey using biometrics. It would make it impossible to mistakenly enter the OTP into a fake scam site.