[
https://issues.apache.org/jira/browse/TOBAGO-1962?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16707240#comment-16707240
]
Henning Noeth commented on TOBAGO-1962:
---------------------------------------
Tobago 4 use the package-lock.json from bootstrap v4.1.3 which doesn't contain
flatmap-stream.
> flatmap-stream in package-lock.json
> -----------------------------------
>
> Key: TOBAGO-1962
> URL: https://issues.apache.org/jira/browse/TOBAGO-1962
> Project: MyFaces Tobago
> Issue Type: Bug
> Components: Themes
> Affects Versions: 5.0.0
> Reporter: Henning Noeth
> Assignee: Henning Noeth
> Priority: Critical
> Fix For: 5.0.0
>
>
> The flatmap-stream contain a malware which is targeting the copay
> application. For more information, read the blog post at:
> https://blog.npmjs.org/post/180565383195/details-about-the-event-stream-incident
> The flatmap-stream package can be found in the package-lock.json of the
> current 5.0.0 master. This should be removed!
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
