mean spirited and dramatic as hell, yes... also, a bad place where real "malicious" things could be done. but "malicious" has a specific meaning and this didn't affect users.

more like dramaticious if you ask me... but also uncovers actual dangerous weaknesses in the npm delivery pipeline...