On: Shai-Hulud Returns: Over 300 NPM Packages Infected

[parliament32]

And this is exactly why Go is winning: because it's actually rather easy to write "pure Go" utilities (no dependencies outside the standard library), which statically compile to boot (avoiding shared libraries).