An incredibly popular JavaScript library might have some worrying malware issues
A critical vulnerability in the popular expr-eval JavaScript library allows remote code execution through unsafe input evaluation. The flaw affects all versions up to 2.0.2, with fixes available in version 2.0.3.