Posted on 2019-12-27 by Mark J. G. Smith Why npm lockfiles can be a security blindspot for injecting malicious modules snyk.io #