[rmbyrro]

I don't think all consequences are fixed. At this point, no one can assure the security of any npm package. What are they doing to restore confidence?