According to several reports on Monday, hackers broke into the node package manager (NPM ... and many developers “pin” their dependencies so they keep using older, safe versions. Still, because users ...