3 ms·

There’s almost a dozen cybersecurity companies scanning NPM publishes in real-time and analysing them.