Five minutes into this javascript exploit video, you’ll understand why that massive stack of node modules in your app is BAD. Nicely done.
And… 14 minutes in and he hits Moment.js… which is everywhere… with a straightforward tough-to-solve regex DDOS hack.
Then mongoose… then…
Is there a keystroker on this site?