I'm someone who made a pretty damn useful NPM package (no, not js-destroy-all-your-data, BTW). And I think that incorporating really useful packages (like mine) in a new app is a basically good idea.

Security experts have helped remove malicious NuGet packages planted in 2023 that were designed to destroy systems years in advance, with some payloads not due to hit until the latter part of this ...

Victims of a destructive form of ransomware, which fails to unlock files even if the ransom is paid, can now retrieve their files for free with a new file decryptor released by security researchers.