One easy way to inject malicious code in any Node.js application
blog.sqreen.io