Somebody Tried to Hide a Backdoor in a Popular JavaScript NPM Package

Like I've been saying, npm is ripe for abuse https://medium.com/p/73fac4bc5068