THE RISKS OF NPM

Summary from the TLDR newsletter

npm install allows the running of arbitrary code, making it unsafe for a variety of environments.