Hacker News new | ask | show | jobs
by strogonoff 1693 days ago
It seems like this was caught soon because it broke many builds. Imagine if this change was hidden better.
1 comments

Correct:

[0] -> Error: Cannot find module '/Users/me/.npm/_npx/27078/lib/node_modules/@svgr/cli/node_modules/coa/compile.js'

What happened there was that he got the broken update, 2.0.3 which just referenced and used compile.js, but didn't include the file.

Then 2.0.4 came out which included compile.js and compile.bat.

Had he updated a couple of minutes later, this error would not have appeared. Not sure if /Users/ is a MacOS thing, but it is a Windows path structure, which might indicate that he was running this on Windows. And in that case he would have been compromised.

[0] https://github.com/veged/coa/issues/99