Security Alerts: debug & ansi-regex Packages Compromised – How Are Others Handling This?

[small temple]

Update

What is flagging those as compromised? What tool are you using for security scans?

4.4.1 of debug does not appear to be one of the compromised versions so I mistrust its output

[quick adder]

You can check here. As a reference.

https://github.com/advisories/GHSA-9qr9-h5gf-34mp

[surreal crescent]

That’s a completely different vulnerability in a completely different package

[quick adder]

Yes this is related to next/react js

[surreal crescent]

But it’s not related to packages you mentioned