The node ecosystem takes the micro-package architecture to extreme. Examples are the infamous is-odd and is-even that is just `return !isOdd(i)`. The result of building an app utilizing numerous dependencies and the dependecy tree that is formed is an increased incident surface.
From my vantage point: Lots of people use Node and projects built with it seem notorious for having a lot of dependencies, so incidents such as the ones listed are high profile and easily proliferated.
NPM has an order of magnitude more packages than the other language-specific package registries. It has more packages than every other registry put together (including Maven Central, PyPI, crates.io, etc).