The npm Threat Landscape: Attack Surface and Mitigations

https://www.securitricks.com/reports/the-npm-threat-landscape-attack-surface-and-mitigations/