Comment by bakugo

Is there anything about npm that makes it particularly susceptible to these attacks, other than the fact that it's the most popular package manager of all?