28 CVEs and advisories name NPM as an affected vendor, newest first. Follow it as a feed.
Nothing listed here yet.