Link Dump – Node.js Security A Malicious Module on npm The npm Meltdown Uncovers Serious Security Risks Package install scripts vulnerability Is Guy Fieri in Your Node.js Packages? Controlling the Node.js security risk of npm dependencies One easy way to inject malicious code in any Node.js application