Right9ctrl released Event-Stream 3.3.6 which contained a new dependency --for the Flatmap-Stream library version 0.1.1. The Flatmap-Stream library v0.1.1 is where the malicious code resides.

Everyone using Event-Stream in their projects is urged to make sure they don’t have a tainted version and update to the latest Event-Stream version 4.0.1. An NPM package with 2,000,000 weekly ...

A hacker has successfully inserted bitcoin-stealing code into a popular JavaScript library used by millions including leading companies. The hack involved the insertion of code into Event-Stream ...