NPM supply chain attacks

[marsonya]

I came across an interesting read on NPM supply chain attacks. Here's the article.
The author rightly states that these attacks are only going to increase. The article talks about a Node Sandbox to deal with it.

That said, we need to preemptively deal with this issue rather than scramble to address it after it's too big to ignore.