@pierogiburo
And only one, if I count npm itself as malware?