# npm: Compromised version of eslint-scope published

> npm status incident “Compromised version of eslint-scope published” on 2018-07-12: impact major (vendor’s label), 2.6 h, 1 update(s). Archived by Rewindex.

Canonical: https://rewindex.com/company/npm/incidents/dn7c1fgrr7ng
Last updated: 2018-07-12T18:52:00Z

- Impact (vendor’s label): major
- Status: resolved
- Started: 2018-07-12 16:13 UTC · Resolved: 2018-07-12 18:52 UTC · Duration: 2.6 h
- Updates: 1
- [Vendor status page: https://status.npmjs.org/incidents/dn7c1fgrr7ng](https://status.npmjs.org/incidents/dn7c1fgrr7ng)
- [Company: npm](https://rewindex.com/company/npm.md)

## Timeline of updates

- **resolved** 2018-07-12 18:52 UTC: We have now invalidated all npm tokens issued before 2018-07-12 12:30 UTC, eliminating the possibility of stolen tokens being used maliciously. This is the final immediate operational action we expect to take today. We will be conducting a forensic analysis of this incident to fully establish how many packages and users were affected, but our current belief is that it was a very small number. We will be conducting a deep audit of all the packages in the Registry to confirm this.

_From the vendor’s published history: only the final update text is available for incidents before Rewindex began polling this page._

## Cite this

Status incident (vendor impact label: major) posted by npm, started 2018-07-12 16:13 UTC, resolved after 2.6 h, 1 update(s).

- Canonical URL: https://rewindex.com/company/npm/incidents/dn7c1fgrr7ng
- Citation: npm, “Compromised version of eslint-scope published” (2018-07-12 16:13 UTC). Archived by Rewindex: https://rewindex.com/company/npm/incidents/dn7c1fgrr7ng (CC BY 4.0).
- Markdown link: `[npm: Compromised version of eslint-scope published (2018-07-12)](https://rewindex.com/company/npm/incidents/dn7c1fgrr7ng)`


---
Canonical: https://rewindex.com/company/npm/incidents/dn7c1fgrr7ng · Markdown: https://rewindex.com/company/npm/incidents/dn7c1fgrr7ng.md · JSON: https://rewindex.com/api/v1/companies/npm/incidents/dn7c1fgrr7ng · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-05T15:59:25.382Z