BlogMalicious code found in npm package event-stream downloaded 8 million times in the past 2.5 months27. November 2018