It's not failure of npm/js ecosystem. It's Github Actions failure that allowed this to happen.