3 ms·NPM flaw allowed 'an attacker to publish new versions of any NPM package'7 points by globalise83 5y ago