Comment by j45

How does one avoid malware in npm specifically?

Makes me not want to use the ecosystem, which isn’t always possible.