News

NPM package with 3 million weekly downloads had a severe vulnerability Untrusted JavaScript config file can execute arbitrary code.