Malicious code found in npm package event-stream downloaded 8 million times in the past 2.5 months

An overview of how the malicious flatmap-stream npm package operates, and remediation steps to follow if you've been affected.