https://blog.wongcw.com/2021/11/18/github%e5%83%85%e7%94%a86%e5%b0%8f%e6%99%82%e4%bf%ae%e5%be%a9npm-javascript%e8%a8%bb%e5%86%8a%e8%a1%a8%e4%b8%ad%e9%95%b7%e6%9c%9f%e5%ad%98%e5%9c%a8%e7%9a%84%e6%bc%8f%e6%b4%9e/
GitHub僅用6小時修復NPM JavaScript註冊表中長期存在的漏洞