The most widely used JavaScript HTTP library on the internet — embedded in millions of production applications, relied on by ...

Forty-five million weekly downloads. One compromised maintainer. Three hours of exposure before anyone noticed.