If that's the worst of my problems (being a heavy user of Node) I'll take it. I haven't come across one reasonable use of eval in 3 years of Node development.

Interesting point at the end that tools focused on web applications might not find this vulnerability.