Not sure if you read the article or not but the author shows that this could be an npm package that, if included in a project, would open up a backdoor. The pay

Not sure if you read the article or not but the author shows that this could be an npm package that, if included in a project, would open up a backdoor. The payload isn't large at all and the code base itself is small.