Hacker gains access to the repo of Event-Stream, a JS library with 2M+ weekly downloads on npm, to inject BitPay's wallet apps with code that steals funds Catalin Cimpanu / ZDNet : ZDNet 2018-11-28 BitPay, Event-Stream, Catalin Cimpanu / ZDNet