We're sharing details of recent incidents on the npm registry, our investigations, and how we’re continuing to invest in the security of npm.