Why npm lockfiles can be a security blindspot for injecting malicious modules

In this post, we show you how easy it is to introduce back doors that are easily missed by project owners… leaving your code insecure.