NPM's status timeline [1] and Eslint.org's postmortem article[2]. edit: NPM had a recent blog article[3] about their progress towards codesigning modules. [1]

NPM's status timeline [1] and Eslint.org's postmortem article[2]. edit: NPM had a recent blog article[3] about their progress towards codesigning modules. [1] https://status.npmjs.org/incidents/dn7c1fgrr7ng https://status.npmjs.org/incidents/dn7c1fgrr7ng [2] https://eslint.org/blog/2018/07/postmortem-for-malicious-package-publishes https://eslint.org/blog/2018/07/postmortem-for-malicious-pac... [3] https://blog.npmjs.org/post/172999548390/new-pgp-machinery https://blog.npmjs.org/post/172999548390/new-pgp-machinery