Three SQL Injection Patterns That Still Ship in Node.js — And the ESLint Rule That Catches Them

TypeScript passed it clean. The code reviewer approved it. It shipped to production. Three months...