S snyk.io NPM lockfiles can be a security blindspot for injecting malicious modules in PRs 259 points fagnerbrack 6 years ago 73 comments