Protecting Your Host from Malicious Dependencies

This isn't limited to NodeJS, but it seems to happen a lot more frequently in&#xA;that ecosystem. A commonly used dependency gets compromised, developers install&#xA;it when doing an npm install, or updating packages, and they now have a trojan&#xA;running on their host. A trojan that gives the attacker access to run arbitrary&#xA;code, e.g keyloggers to steal passwords as they are entered, theft…