yamlinc icon indicating copy to clipboard operation
yamlinc copied to clipboard

Set exact version of package 'colors'

Open novalu opened this issue 3 years ago • 0 comments

The infinite loop introduced in the code (of colors package version 1.4.2) will keep running indefinitely; printing the gibberish non-ASCII character sequence endlessly on the console for any applications that use 'colors.'

More info about colors package issue is here: https://www.bleepingcomputer.com/news/security/dev-corrupts-npm-libs-colors-and-faker-breaking-thousands-of-apps/

Temporary solution is to define exact version of package colors, i.e. 1.3.3 or 1.4.0 instead of ^1.3.3 (which install last minor/patch (compromised) version 1.4.2. This pull requests changes version from ^1.3.3 to 1.3.3.

novalu avatar Jan 10 '22 16:01 novalu