maziac / DeZog

Visual Studio Code Debugger for Z80/ZX Spectrum.
MIT License
212 stars 35 forks source link

Your VS Code extension is affected by a security issue #1

Closed auchenberg closed 5 years ago

auchenberg commented 5 years ago

Hi,

Kenneth here from the VS Code team.

Your extension is affected by https://code.visualstudio.com/blogs/2018/11/26/event-stream,

We will need to take action to block your extension if your extension isn't updated in a reasonable timeframe.

Please get in touch at kennau@microsoft.com

/k

maziac commented 5 years ago

Hi,I got the e-mail below. You asked to get in touch.Is my extension already unlisted?What are the next steps/what are you expecting from me?How can I check myself If my extension is not affected anymore?BR,ThomasAm 28.11.2018 03:59 schrieb Kenneth Auchenberg notifications@github.com:Hi, Kenneth here from the VS Code team. Your extension is affected by https://code.visualstudio.com/blogs/2018/11/26/event-stream, We will need to take action to block your extension if your extension isn't updated in a reasonable timeframe. Please get in touch at kennau@microsoft.com /k

—You are receiving this because you are subscribed to this thread.Reply to this email directly, view it on GitHub, or mute the thread.

auchenberg commented 5 years ago

Your extension is shipping the module flatmap-stream v0.1.0 which is marked as malware. Please check your dependencies by running npm ls event-stream flatmap-stream and remove the dependencies.

maziac commented 5 years ago

Done. I published a new release 0.6.1 with flatmap-stream removed. Please let me know if that's OK now.

Cheers, Thomas

Am 29.11.2018 um 07:05 schrieb Kenneth Auchenberg notifications@github.com:

Your extension is shipping the module flatmap-stream v0.1.0 which is marked as malware. Please check your dependencies by running npm ls event-stream flatmap-stream and remove the dependencies.

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/maziac/z80-debug/issues/1#issuecomment-442717391, or mute the thread https://github.com/notifications/unsubscribe-auth/AC8G9QjT59SGRpekfgRreovUCN-IpT0Vks5uz3lDgaJpZM4Y2wsL.

auchenberg commented 5 years ago

Wonderful, thanks thomas!