JavaScript, Nodejs, Security, NPM.
dependency used by other modules. This malicious module is triggered when it receives specially-crafted headers and will then evaluate arbitrary JavaScript code provided in the request. The getcookies module did become a dependency of several other modules, but the damage theoretically wasn’t