Since npm is an open platform, anyone can publish packages to it. And thus the security impact of using npm in…