Widely used open source software contained bitcoin-stealing backdoor. Malicious code that crept into event-stream JavaScript library went undetected for weeks

https://arstechnica.com/information-technology/2018/11/hacker-backdoors-widely-used-open-source-software-to-steal-bitcoin/