Why does the JS ecosystem attract so many puddingheads like this with their emojis and their cotton-candy bullshit? No wonder it's a house of cards.
- It being web based means you can target this kind of software for maximum "impact"
- NPM dep trees are massive and you generally have thousands of tiny libs. The chance of something like this happening and being noticed goes up therefore.
- NPM ecosystem is a bit more wild west which again leads to increased chance of something like this being able to occur in the first place.
So they end up using it.
You rarely/ever see things like emoji commit messages in the other worlds (ex C#, Java, etc)