Your npm/pip Install Just Ran Arbitrary Code — And You Didn't Notice

Every time you run npm install or pip install, you're executing code written by strangers on your...