Despite best efforts to track software dependencies, blind spots still exist leading to silent vulnerabilities in software.
Read more: https://www.csoonline.com/article/3626478/why-code-reuse-is-still-a-security-nightmare.html
Read ReversingLabs Research here: https://blog.secure.software/groundhog-day-npm-package-caught-stealing-browser-passwords