Every Node.js project accumulates vulnerable dependencies. The npm registry holds over 2.5 million packages, and researchers found 454,000 malicious or vulnerable packages uploaded in 2025 alone.
Get ready for your aha moment: Every weekday, host Meghna Chakrabarti pierces your news bubble to expose the whole story. Getting answers to the questions that need to be asked, examining our history ...