Disclosure: I’m the founder of https://socket.dev https://socket.dev A week waiting period would not be enough. On average, npm malware lingers on the registry

Disclosure: I’m the founder of https://socket.dev https://socket.dev A week waiting period would not be enough. On average, npm malware lingers on the registry for 209 days before it's finally reported and removed. Source: https://arxiv.org/abs/2005.09535 https://arxiv.org/abs/2005.09535