This has been going on for years now. I have used Node, I would not go near the NPM auto install Spyware service. How is it possible that people keep this ser

This has been going on for years now. I have used Node, I would not go near the NPM auto install Spyware service. How is it possible that people keep this service going, when it has been compromised so regularly? How's it possible that people keep using it?