TLDR
The npm package event-stream's package contained a malicious package named "flatmap-stream" The malicious package had been downloaded over 8 million times. Vulnerabilities being part of packages is a serious issue that has the potential to compromise your application and user data. The WhiteSource Vulnerability Database covers over 200 programming languages and vulnerabilities collected from a wide variety of resources. It provides details such as severity, weakness type, additional resources but also suggests a top fix that can help you make your application secure.via the TL;DR App
no story
Written by danielcrouch | Occasional Thoughts on Coding, Security, and Management
