3 ms·Vulnerabilities in GitHub NPM packages could allow threat actors to publish1 points by feross 5y ago