Post

Astro
@astro.build

A number of popular npm packages have been compromised and malicious versions published. Most of these have been removed from the registry. Astro indirectly depends on one that hasn't, so we have published 5.13.6 that pins a safe version.

socket.devnpm Author Qix Compromised via Phishing Email in Major Suppl...npm author Qix’s account was compromised, with malicious versions of popular packages like chalk-template, color-convert, and strip-ansi published.

14 reposts59 likes