Protecting our users from the ESLint NPM package breach

This post details the response to a security incident involving malicious code in two popular NPM packages (eslint-scope and eslint-config-eslint). It describes the revocation of access tokens for at-risk users and announces the upcoming deployment of new REST APIs that will allow administrators of Visual Studio Team Services accounts to centrally revoke Personal Access Tokens (PATs) and JSON Web Tokens (JWTs). It also directs users to documentation for regenerating revoked tokens and revoking their own PATs.