[Bob434]

is the average user susceptible to this? is it in an update?

[goorala]

No. You’ll be fine as long as you stay away from node.js/npm. npm has been a vector for bad packages for a long time, and they seem either unwilling or unable to do anything about it.