The JavaScript npm event-stream Vulnerability
A few months ago a clever attack was introduced in the event-stream npm package. It’s been explained in detail here, but let me sum it up in TL;DR form here for anybody who hasn’t been paying attention: 1. In …