The JavaScript npm event-stream Vulnerability

added by DotNetKicks
11/28/2018 5:19:27 AM

1 Kicks, 2512 Views

A few months ago a clever attack was introduced in the event-stream npm package. It's been explained in detail here, but let me sum it up in TL;DR form here for anybody who hasn't been paying attention: 1.