The lodahs package 0.0.1 for Node.js is a Trojan horse
coocoor.com