You have no idea how how bad this really is.

Theo’s video exposes a massive wave of npm and GitHub supply chain attacks that hijack developer accounts, inject stealthy malware into packages, steal cloud secrets, and wipe data; revealing just how broken and insecure the modern JavaScript ecosystem really is.