I love that even when trying to put malware into Arch Linux AUR, the malware is still distributed through NPM. Legendary platform.