The Ant Design Christmas Egg That Went Wrong
Another reminder that dependencies are bad. Introducing someone else&#x27;s code into your production environment without auditing it is a security breach.<p>This &quot;undocumented code change&quot; could easily have grabbed any login details&#x2F;session cookies&#x2F;personal data from the page and sent them somewhere, instead of drawing snowflakes. I doubt anyone would have noticed for a while... clearly there were a large number of people who weren&#x27;t auditing the latest version of the code to see what changed, and only noticed the change because of the visual effects.<p>Sorry, but if you deploy a random chunk of third-party code into your production environment without knowing exactly what it does, you deserve to be sacked.