bower registration was hijacked?!

Question

Closed this issue 8 years ago · 5 comments

Running bower info scrollMonitor started to return this in the last few hours:

It points to this repo: https://github.com/sakabako/scrollMonitor
Which contains some minified code which I suspect is malicious, but didn't verify yet

Answer 1 · 2016-12-04T15:48:33.000Z

Thank you. That is exactly what happened.

Answer 2 · 2016-12-04T16:48:31.000Z

The bower people fixed it. Run bower cache clean to get their update.

Answer 3 · 2016-12-04T16:49:47.000Z

Full story: I changed my username a long time ago, and someone finally wised up to that.

Answer 4 · 2016-12-04T16:53:57.000Z

Thanks! Since fix requires cache clean I suggest you'd also try to regain access to sakabako and delete this account.

Answer 5 · 2016-12-04T16:55:12.000Z

Ahhh, you did delete it and someone recreated? I guess that's actually a github bug then...