Visit Website

The npm blog archive reports on a malicious module named getcookies that masqueraded as a cookie parsing library but contained a backdoor, leading to the unpublishing of three packages and three versions of a fourth package from the npm Registry.

ALTERNATIVES