ESLint compromised, may have stolen your credentials
It seems language package manager compromise is becoming an increasingly prevalent attack vector.<p>IMHO, at some point, the software development industry is going to have to come together and find a way to collectively audit the most widely used packages, considering that the status quo of everyone doing their own auditing is clearly not working. Perhaps a twitter-style 'blue tick' or similar for audited libraries.