For those interested see: How one developer just broke Node, Babel and thousands of projects in 11 lines of JavaScript

https://www.theregister.co.uk/2016/03/23/npm_left_pad_chaos/