A post-mortem of the malicious event-stream backdoor

A look back at the chain of events that led to the use of the malicious npm package "flatmap-stream" and a reflection on what it means for the fragility of open source.
原文:https://www.a8q9.cn/en/article/a-post-mortem-of-the-malicious-event-stream-backdoor-fd07ab.html