JavaScript, Nodejs, Security, NPM.
wide-spread. You may now be wondering how much damage could be done, or how much influence over the npm ecosystem an attacker could gain. In the article “Gathering weak npm credentials”, a security researcher describes how he was able to obtain credentials (and therefore publishing rights) for npm