New Protestware Found Lurking in Highly Popular NPM Package

There may be a case for distributing malware to enemies, as speed bumps if not as weapons. But if we do that with the current distribution methods it will tend to remove whatever trust we have left in those systems.

Which while unfortunate, is probably necessary. But removing the need for that trust will also remove it as a practical means of malware distribution, for good and ill. I'll go out on a limb and claim removing malware will be a net good.