Not really. A lot of other package managers are vulnerable to the same kind of attacks seen on node/npm. It's just that a lot of npm packages can have an exces

Not really. A lot of other package managers are vulnerable to the same kind of attacks seen on node/npm. It's just that a lot of npm packages can have an excessively long dependency chain which make it harder to audit. And the npm ecosystem is massive.