[bleuarff]

Because it's never been considered an interesting target, compared to npm's reach?

[user3939382]

For a while CPAN was a very big deal and those packages were probably on just about every corporate network on Earth.