[rwth-security] How a Single Vulnerability Can Bring Down the JavaScript Ecosystem