CSRF flaw in csurf NPM package aimed at protecting against the same flaws

Researchers found that while the popular package was intended to defend against CSRF, a CSRF bug has lain dormant within the code since the last version release, impacting any application using the open source package.