If you read the journals, while there is increasing mention of other languages like Python, most of the software discussed ...
Ten malicious packages mimicking legitimate software projects in the npm registry download an information-stealing component ...