Every time a developer types npm install, they are placing a bet that the package they are pulling into their project is not ...
Who knew one subscription could kill five others?