As pointed out by others, the attack vector relied on minified code distributed by NPM being independent from the repository code.

Should we move to having production releases do their own minification locally? Or, as others have suggested, use tools to parse source and minified code to identify differences?