Oh, so it's not only "JavaScript bad and npm bad". Apparently, if your language uses third party dependency registry, you are prone to malicious code, regardless if it's Javascript or not.

Use containers for development. And reduce the amount of third party deps you import into your projects. This is only going to get worse.