Security issues related to the npm registry

https://github.blog/2021-11-15-githubs-commitment-to-npm-ecosystem-security/

https://bounty.github.com/

…