Hacker News new | ask | show | jobs
by andrew_ 2897 days ago
It wasn't up for review. It was published out of band, and outside of the ESLint pipeline using likely stolen credentials. That's how that stuff sneaks in.
1 comments

Ah, thanks for the clarification. At first I thought this made it through the actual release process.