A poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend ...

Then I looked at something I'd completely ignored. Every. Single. Incoming. Request. Was reading a config file synchronously. ```javascript fs.readFileSync ('/path/to/ config.json ') ``` Right there ...