npm Security Best Practices Skill by ara.so — Security Skills collection. This skill provides expert guidance on securing npm package installations, preventing supply chain attacks, and implementing security best practices for Node.js development. Based on the comprehensive npm-security-best-practices repository by Lirantal. Overview The npm ecosystem is a frequent target for supply chain attacks including: - Shai-Hulud attacks - Worm-like propagation through compromised packages - Nx incident - Malicious code in postinstall scripts - event-stream attack - Long-running exfiltration via lifecy…