--- title: "Check your npm account, a compromised package has been published" publication: "Node Weekly" issue: 246 published_at: "2018-07-12" canonical_url: "https://nodeweekly.com/issues/246" --- The latest Node.js news, articles, tools, and projects. #246 — July 12, 2018 [Read on the Web](https://nodeweekly.com/issues/246) Node Weekly [Compromised npm Package Being Investigated, Revoke Your npm Login Tokens and Use 2FA If Possible](https://status.npmjs.org/incidents/dn7c1fgrr7ng) — A [compromised version of eslint-scope was published](https://github.com/eslint/eslint-scope/issues/39) so npm login tokens generated earlier today have been invalidated as a security precaution. [Here's a nice writeup of what happened and what to do.](https://blog.sqreen.io/eslint-backdoor/) It seems an account was compromised to publish the package, so you’re recommended to check your _own_ npm account hasn’t been misused recently either and enable 2FA if at all possible (on publishes, as well as logins). npm status [Kleur: Fast ANSI Color Formatting for Terminal Text](https://github.com/lukeed/kleur) — Has a nice API, supports nested and chained colors, `printf`-style formatting, and claims to be the _fastest_ such library, too. Luke Edwards [![\](https://copm.s3.amazonaws.com/59b8feb9.png)](https://survey.ca1.qualtrics.com/jfe/form/SV_5pebMx6m0YSu2YR?utm_source=cooperpress&utm_medium=email&utm_content=18-07-12-nodeweekly-newsletter&utm_campaign=developer-survey) [Take Our 5-Min Survey & Win a Chance at a Lego Mindstorm](https://survey.ca1.qualtrics.com/jfe/form/SV_5pebMx6m0YSu2YR?utm_source=cooperpress&utm_medium=email&utm_content=18-07-12-nodeweekly-newsletter&utm_campaign=developer-survey) — We want to know your pain points building & programming open source languages. We've got 3 cool prizes too. ActiveState sponsor [Testing Node.js in 2018](https://hackernoon.com/testing-node-js-in-2018-10a04dd77391) — Stream powers feeds for over 300+ users and their team is keen on testing well. Here they share what Node tools and packages they use. Nick Parsons [npm Inc. Joins ECMA International and TC39](https://blog.npmjs.org/post/175722319045/npm-joins-ecma-international-and-tc39) — The company behind Node’s primary package manager now sits on the [technical committee](https://www.ecma-international.org/memento/tc39-rf-tg.htm) that defines the programming language we all know and love. The npm Blog [npm.community: A New Place to Chat About npm](https://blog.npmjs.org/post/175587538995/announcing-npmcommunity) — npm is moving its public issue tracking from GitHub to a new Discourse-powered forum at [npm.community](https://npm.community/). You can report bugs, make new feature suggestions, and more. The npm Blog 💻 Jobs [React/Full Stack Developer (Remote or Southern CA)](https://www.geistinteractive.com/careers/) — Join our small team building apps and services for customers in over 50 countries worldwide. We learn. We build. We deliver. Geist Interactive [Join Our Career Marketplace & Get Matched With a Job You Love](https://www.hired.com/node) — Through Hired, software engineers have transparency into salary offers, competing opportunities and job details. Hired 📘 Tutorials [Using AWS Lambda and Node to Scan Your S3 Uploads](https://blog.truework.com/2018-07-09-s3-antivirus-lambda-function/) Victor Kabdebon [Updating Dependencies Sucks, So Let’s Do More of That](https://depfu.com/blog/updating-dependencies-sucks?utm_source=nodeweekly&utm_campaign=brief&utm_content=domore) Depfu sponsor [Scraping Web Sites for Info Easily using Code.xyz and Node](https://codeburst.io/scrape-websites-for-information-easily-using-code-xyz-and-node-js-8be3e2f938ab) — Only scrape sites responsibly and follow robots.txt and copyright laws, of course. Janeth Ledezma [Performing Twitter Sentiment Analysis using Node](https://boostlog.io/@anshulc95/twitter-sentiment-analysis-using-nodejs-5ad1331247018500491f3b6a) Anshul Chauhan 🔧 Code and Tools [carbon-now-cli: Create Beautiful Images of Code From Your Terminal](https://github.com/mixn/carbon-now-cli) — It’s a terminal client for the awesome [Carbon](https://carbon.now.sh/) tool. Miloš Sutanovac [AWS Serverless Express: Run Express-Based Apps Serverlessly](https://github.com/awslabs/aws-serverless-express) — Run serverless apps and REST APIs using your existing app framework, on top of AWS Lambda and Amazon API Gateway. [serverless-http](https://github.com/dougmoscrop/serverless-http) is another option in this space. Amazon Web Services [Singlie: Singly Circular and Linear Linked Lists for ES6](https://github.com/klauscfhq/singlie) Klaus Sinani [electron-react-boilerplate: Electron Boilerplate for Cross Platform Apps](https://github.com/chentsulin/electron-react-boilerplate) — An Electron app boilerplate based on React, Redux, React Router, and Webpack. C. T. Lin [Honeypot: A Honeypot That Displays Attacks in Real Time](https://github.com/Shmakov/Honeypot) — Listens on 128 common TCP ports and lets you see connection attempts live. Nikolay Shmakov [Ephemeral Tweets: Automatically Delete Your Old Tweets](https://github.com/stephanmax/ephemeral-tweets) — A Node script that runs on webtask to remove tweets older than a certain age from your account. Stephan Max And if you won't listen to us, listen to Mathias.. :-) [![\](https://res.cloudinary.com/cpress/image/upload/v1531416005/af9k30iolzvpwzugqu67.png)](https://twitter.com/mathias/status/1017409984521371648) Curated by [Cooperpress](https://cooperpress.com/) and [Peter Cooper](https://twitter.com/peterc) [Change your email address](https://nodeweekly.com/edit_subscription/*|UID|*) or[Stop getting this newsletter](https://nodeweekly.com/leave/*|UID|*) © Cooper Press Ltd · Fairfield Enterprise Centre, Louth, LN11 0LS, United Kingdom