JavaScript, Nodejs, Security, NPM.
development machines, viewing the output, changing their dependencies to no longer require the vulnerable module, then deploying again. If a vulnerability becomes known it will not proactively defend a currently-deployed service. Often times issues will be discovered with npm audit for packages