You know NPM isn’t the only way to install JavaScript packages, right? You can add a GitHub repository directly. Yanking the NPM package doesn’t protect people who are pulling from GitHub directly.
It's a suspicious action, so probably locking the account down until they can get in touch and confirm that's what the user wanted to do, and wasn't hacked etc. Could even be automated between npm and github, a compromise warning or similar. All conjecture though.
We're an US based ed-tech company that makes cloud-based, pre-K–12 educational software and adaptive assessments. We want faster, smoother deployments into our AWS environments - Looking for people to help mature our CI/CD platform.
Not disagreeing with you, just posting information I've come across, they plan to support 3rd party tools including terraform and jenkins, how is unclear.
We're an US based ed-tech company that makes cloud-based, pre-K–12 educational software and adaptive assessments. We're looking for someone to help mature our CI/CD systems and processes
