-
Notifications
You must be signed in to change notification settings - Fork 157
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Malware in dependency #167
Comments
@quaspar Thanks for the report. I use 0.7.28 and never was updated to 0.7.29. react-device-detect/package.json Line 65 in ebd50cd
|
But the carret means you will get 0.7.29 if you update now. Change to 0.7.28 (without carret). |
Thanks for pointing this out, you are right. I will update and upload new version soon. |
@quaspar Thanks again, new version already on npm. |
Maybe this should be locked to the latest patch version that came out? 0.7.30. |
ua-parser-js has been hijacked and installs malware on your computer. Check it’s npm page.
fix dependency to version 0.7.28 as later versions are dangerous.
The text was updated successfully, but these errors were encountered: