Use [email protected] to fix vulnerability issue of event-stream.

[Eskibear]

To resolve the alert.

Vulnerable versions: > 3.3.4
Patched version: No fix
The NPM package flatmap-stream is considered malicious. A malicious actor added this package as a dependency to the NPM event-stream package in versions 3.3.6 and later. Users of event-stream are encouraged to downgrade to the last non-malicious version, 3.3.4.

Users of flatmap-stream are encouraged to remove the dependency entirely.

[testforstephen]

why need to update vscode?

[Eskibear]

the dependency is introduced by vscode.

$> npm ls event-stream
[email protected] /Users/sechs/Documents/vscode-maven
└─┬ [email protected]
  ├─┬ [email protected]
  │ └── [email protected]
  ├─┬ [email protected]
  │ └── [email protected]  deduped
  ├─┬ [email protected]
  │ └── [email protected]  deduped
  └─┬ [email protected]
    └── [email protected]  deduped