There is some effort to make NPM more secure https://github.com/npm/cli/pull/9360.