r/node•6 yr. agoViolentHommeWhy npm lockfiles can be a security blindspot for injecting malicious modulessnyk.io/blog/why-npm-lockfiles-can-be-a-secur...snyk.ioPosted Dec 23, 2019, 12:50 AM UTC7614Share