[rapind]

At this point, I'm not sure anyone should still be using npm.

[quantummagic]

Seriously. The only way to use it is to be a very religious person. You have to pray every single time you use it that your system doesn't become compromised.

[arendtio]

But isn't this a problem with the ecosystem and not with the program? I mean, with yarn / etc., you have the same problems, don't you?

[rapind]

pnpm is generally safer and had the age delay much sooner than npm as well.