How do you test your projects if there are any infected/affected dependencies used? As i understand it could also be a dependency of a dependency ... that could be affected?
npm audit
npm audit --fix
npm ls some-pkg