Right9ctrl released Event-Stream 3.3.6 which contained a new dependency --for the Flatmap-Stream library version 0.1.1. The Flatmap-Stream library v0.1.1 is where the malicious code resides.

Everyone using Event-Stream in their projects is urged to make sure they don’t have a tainted version and update to the latest Event-Stream version 4.0.1. An NPM package with 2,000,000 weekly ...

Microsoft's superset of JavaScript, TypeScript, has shot up to become the fourth most popular programming language on code collaboration platform, GitHub. TypeScript's ascent is tracked in ...