Harvesting Credit Card number or Why npm sucks

For those of you, who are in web frontend development, this article might be of interest:

https://hackernoon.com/im-harvesting-credit-card-numbers-and-passwords-from-your-site-here-s-how-9a8cb347c5b5

Lucky for me, we live in an age where people install npm packages like they’re popping pain killers.

I think, all steem apps are using npm, don't they?