Replies: 2 comments 4 replies
-
|
None of the affected packages are used in Tabby. |
Beta Was this translation helpful? Give feedback.
-
|
Sorry but I don't understand, i found 'chalk' in plenty of tabby files, as in AppData\Local\Programs\Tabby\resources\builtin-plugins\tabby-terminal\yarn.lock, with 2 dependencies either compromised : |
Beta Was this translation helpful? Give feedback.
-
|
According to the article you've linked only [email protected] is compromised. |
Beta Was this translation helpful? Give feedback.
-
|
Sorry if my first reply was ambiguous, I was referring to the specific package versions from your table. Many of those packages are used, but none of the specific versions that were compromised. |
Beta Was this translation helpful? Give feedback.
-
|
ok, many thanks for your clarification ! |
Beta Was this translation helpful? Give feedback.
-
|
Sorry but I don't understand, i found 'chalk' in plenty of tabby files, as in AppData\Local\Programs\Tabby\resources\builtin-plugins\tabby-terminal\yarn.lock, with 2 dependencies either compromised : |
Beta Was this translation helpful? Give feedback.
Uh oh!
There was an error while loading. Please reload this page.
-
After reading this article : https://www.aikido.dev/blog/npm-debug-and-chalk-packages-compromised
can I continue to use tabby without any risk ?
Beta Was this translation helpful? Give feedback.
All reactions