You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Looking at the original repo, I am not 100% convinced that this is a compromised package. @nextstepwebs seems to have opened legitimate PR's for the origin repo and they have been merged.
Hi guys,
as you have all noticed, this package has most probably been compromised and the linking from npmjs is incorrect. Correct link is https://github.com/sparksuite/simplemde-markdown-editor
Please visit following page to fill a report on npmjs and ask them to update the linking to correct package :).
https://www.npmjs.com/support?inquire=security&security-inquire=malware&package=simplemde&version=1.11.2
I'd like to use this package, but I dont want to add dependency that is known to be compromised. I have already filled the report, please join me ;) .
The text was updated successfully, but these errors were encountered: