event-stream npm package version updated (malware issue); fix to modal window handling