Npm backdoor predicted almost a year ago (kind of)
hackernoon.com