January 15, 2020 Malicious npm package taken down after Microsoft warning Criminals have been caught trying to sneak a malicious package on to the popular Node.js platform npm (Node Package Manager). Naked Security
February 23, 2018 NPM update changes critical Linux filesystem permissions, breaks everything A recent update to the Node Package Manager introduced a bug that caused it to interfere with the operating system, by locking the system itself out of numerous mission-critical files Naked Security