Unfortunately with 1.7M+ NPM modules and the approach of using lots of small external libraries, I'd expect to see this kind of attack increasing in popularity.

Unfortunately with 1.7M+ NPM modules and the approach of using lots of small external libraries, I'd expect to see this kind of attack increasing in popularity. The question is, for every one of these attacks that get spotted, how many are slipping by.