Your status page isn't clear, but are all versions between the compromised and "... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		oakesm9 3 days ago \| parent \| context \| favorite \| on: Shai-Hulud Returns: Over 300 NPM Packages Infected Your status page isn't clear, but are all versions between the compromised and "safe to install" versions compromised or just the ones listed? For example I installed `posthog-react-native` version `4.12.4` which is between the `4.11.1` version which is compromised and the safe to install version `4.13.0`. Is that version compromised or not?

timgl 3 days ago [–]

The only compromised versions are the ones listed. Any other versions are fine.

oakesm9 3 days ago | [–]

Thank you for the confirmation. I have updated to 4.13.0 anyway.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact