The library loading the malicious code is named Event-Stream, a JavaScript npm package for working with Node.js streaming data. Also: Young women dominate in software, but still face setbacks CNET ...