Downgrade to last last non-malicious version of event-stream dependency
Downgrade to last last non-malicious version of event-stream dependency

From Github security alert:
The NPM package flatmap-stream is considered malicious. A malicious actor added this package as a dependency to the NPM event-stream package in versions 3.3.6 and later. Users of event-stream are encouraged to downgrade to the last non-malicious version, 3.3.4.

Collaborne/gulp-xliff-to-carbon-i18n