Hacker News Reader

They only found these malwares because the malware part was at the top level. Who knows how many are there that hide this logic in an npm dependency.

Reminds me of

Now what if there only was a way to detect apps doing suspicious network requests... /s