If they run npm at all, quite often.

of course, how else it could install system packages it needs /s