The library loading the malicious code is named Event-Stream, a JavaScript npm package for working with Node.js streaming data. Also: Young women dominate in software, but still face setbacks CNET ...

Jailed, written by JavaScript developer Dmitry Prokashev, uses native JavaScript functions to load a set of JavaScript code into a sandboxed environment and export functions to the outside world.