01
event-stream 2018: The npm Package Takeover That Hid Cryptocurrency-Stealing Code
The event-stream incident showed how transferring maintainership of a trusted npm package could let a malicious dependency enter downstream applications and target cryptocurrency wallets.
↗