Cryptocurrency-Stealing Code Distributed via Popular Library
The popular EventStream Node.js library was recently modified to fetch malicious code designed to steal crypto-currencies.
Designed as a toolkit to make creating and working with streams easy, the JavaScript package has around two million downloads a week, which makes it a valuable resource to application developers and malicious actors alike.