Comment by serial_dev

Couldn't similar issues happen with Rust, Python, Dart, C#, Java, Ruby? Supply chain attacks are not unique to Node / NPM.

I'm sure the list of available attacks are somewhat different, but you can get pwned in all of these ecosystems.