A hacker has gained (legitimate) access to a popular JavaScript ... poisoned the library with malicious code. Right9ctrl released Event-Stream 3.3.6 which contained a new dependency --for the ...