3 ms·If they had put the malware in an innocent looking package.json dependency, that guy would have been pwned.by olalonde 1y agoIf they had put the malware in an innocent looking package.json dependency, that guy would have been pwned.