Dealing with npm hack!!!

[Sai-Ishaan]

Select Topic Area

Question

Body

What's the general protocol to deal with npm hacks, like the Sha1-hulud and 2.0? Must be pretty nerve-wrecking to install any new packages for both personal and corporate projects?

If there's an alternate way to build projects without npm, I'm all ears :))