Good call. We've fixed the versions, and the dev team is having a conversation to see how close to 0 dependencies they can get.

Thanks! 🙏

Sorry, not sorry 🙃

Sleep well! I can't imagine the amount of stress you must have felt. But you did right by the community. Thank you! ❤️

I figured. The process with npm is quite slow and frustrating a lot of the time :(

Yes, the npm abuse/reporting system leaves a lot to be desired.

www.aikido.dev/blog/npm-deb... :)

For reference, simple-swizzle is still compromised :(

What was the email address it came from? Did you invalidate all tokens on the account too? Attackers tend to leave those as backdoors.