Npm packages are getting hacked. and attackers are attempting more and more.

Recently UA-Parser.js was attached and scripts were installed on compromised systems to extract browser stored passwords and do crypto mining. Understanding such attacks will help you to safeguard yourself from such incidents in the future.