Unofficial date.js has new v4.0.0 - possible malware - Githubissues

matthewmueller / date

Date() for humans

http://matthewmueller.github.io/date/

1.48k stars 88 forks source link

Unofficial date.js has new v4.0.0 - possible malware #102

Open mikemaccana opened 3 years ago

mikemaccana commented 3 years ago

The official package on npm is https://www.npmjs.com/package/date.js, on 0.3.3

The unofficial package on npm is https://www.npmjs.com/package/@akepinski/date.js but that has version 4.0.0 - I can see from [History.md] that 0.3.3 was the last release.

Does a version 4.0.0 exist? If not it would be worth taking down the https://www.npmjs.com/package/@akepinski/date.js.