The popular EventStream Node.js library was recently modified to fetch malicious code designed to steal crypto-currencies.
Designed as a toolkit to make creating and working with streams easy, the JavaScript package has around two million downloads a week, which makes it a valuable resource to application developers and malicious actors alike.
http://feedproxy.google.com/~r/Securityweek/~3/K2G1seHkJHE/cryptocurrency-stealing-code-distributed-popular-library
