On: Malicious npm packages detected across Red Hat Cloud Services

[Kuinox]

Yes this is kinda my point. Instead of having a few projects/org, it's a constellation of packages too small, it's impossible to know who you depend on when adding a dependency.