npm used to do that. bun never did. No idea about the past for pnpm or yarn.

		sroussey 49 days ago \| parent \| context \| favorite \| on: NPM flooded with malicious packages downloaded mor... npm used to do that. bun never did. No idea about the past for pnpm or yarn.