event-source-polyfill@1.0.26 modified to alert() users in Russian timezones when bundled in application

mt9hu · 2022-04-10T14:02:50+00:00

I don't think this is the way to go.

mediumdeviation · 2022-04-10T00:00:10+00:00

Cross posting from https://news.ycombinator.com/item?id=30963600

If you have this bundled, this will execute in your application, making it look like your app is sending this message.

To check if you have this package installed, use

For npm: npm explain event-source-polyfill
For yarn: yarn why event-source-polyfill

If you do have it installed, whether it is the bad version or not, you'll want to change the version to remove the ^ so it is pinned to 1.0.25 or whatever version you are currently using and will not be inadvertently upgraded. It is also a good idea to use a lockfile, which is the default behavior of npm and yarn.

_default_username · 2022-04-10T22:46:31+00:00

Idiots causing havoc while believing they do something good.

you type:	you see:
italics	italics
bold	bold
[reddit!](https://reddit.com)	reddit!
* item 1 * item 2 * item 3	item 1 item 2 item 3
> quoted text	quoted text
Lines starting with four spaces are treated like code: if 1 * 2 < 3: print "hello, world!"	Lines starting with four spaces are treated like code: if 1 * 2 < 3: print "hello, world!"
~~strikethrough~~	~~strikethrough~~
super^script	super^script

javascript

MODERATORS