ESLint compromised, may have stolen your credentials
It seems language package manager compromise is becoming an increasingly prevalent attack vector.IMHO, at some point, the software development industry is going to have to come together and find a way to collectively audit the most widely used packages, considering that the status quo of everyone doing their own auditing is clearly not working. Perhaps a twitter-style 'blue tick' or similar for audited libraries.