Bash script to check for affected ESLint compromised ([email protected])

check-eslint.sh

#!/bin/bash
# Checks all directories in cwd for compromised eslint version
cwd=$PWD
for d in `find . -maxdepth 1 -type d`; do
  cd $d
  version=$(npm ls 2> /dev/null | grep eslint@ | sed -e 's/.*eslint@\([0-9.]*\).*/\1/')
  if [ -n "$version" ]; then
    for v in $version; do
      echo "$d -> eslint@$v"
      if [ "$v" = '3.7.2' ]; then
        echo "COMPROMISED!!! $d"
      fi
    done
  fi
  cd $cwd
done