BlogMalicious code found in npm package event-stream downloaded 8 million times in the past 2.5 monthsNovember 27, 2018