Hacker News new | past | comments | ask | show | jobs | submit
insanitybit | on: Keyv and friends compromised in active Shai-Hulud supply chain attack
Yes, it has nothing to do with the design of npm (relative to similar languages/ repositories) and everything to do with the popularity.