Title: Remote code injection vulnerability wild in public npm package, plausible-sounding &#x27;express-cookies&#x27; and its dependency &#x27;getcookies&#x27;. &gt;10K downloads during April.<p>Vulnerable code: https:&#x2F;&#x2F;npm.runkit.com&#x2F;getcookies&#x2F;test&#x2F;harness.js?t=1525249320108<p>https:&#x2F;&#x2F;www.npmjs.com&#x2F;package&#x2F;express-cookies
Upvote: