K kb.cert.org Vulnerability #319816 – npm fails to restrict the actions of malicious packages 279 points sebastianmck 10 years ago 130 comments