The three open source tools flag malicious JavaScript packages before they are downloaded and installed from the npm package manager.

from Dark Reading https://ift.tt/3g5OTCY
via IFTTT