Vulnerability #319816 – npm fails to restrict the actions of malicious packages279 points by sebastianmckRead the articleDiscussion on Hacker News