More than 40 popular NPM packages compromised

Open source helps hackers too.

Any supply chain with anonymous contributors is suspect.