Re:Devs unknowingly use “malicious” modules snuck into offic...
by lamlam on Sunday September 17, 2017 @09:49PM
(#15272817)
There are many tools that can scan your dependencies and tell you if anything is off. Here's one for reference (cannot vouch for it though as I have not used it):
https://github.com/jeremylong/DependencyCheck/blob/master/RE...