u/qwertydiy

This should hopefully reduce the spread of the recent Shai Hulud attacks on npm but they are reliant on you catching the bugs in transit meaning you need to assume still that packages are compromised (I know, bummer). Think of it more as a reduction in spread rate the a treatment or cure.

We better update when the next patch comes ASAP. Too bad way too many companies and distros don't do that. This one was found by a human team (Qualys) though.