There were. They're just not as popular here. For example https://www.sonatype.c...

		viraptor 66 days ago \| parent \| context \| favorite \| on: Shai-Hulud Returns: Over 300 NPM Packages Infected There were. They're just not as popular here. For example https://www.sonatype.com/blog/malware-removed-from-maven-cen... Maven is also a bit more complex than npm and had an issue in the system itself https://arxiv.org/html/2407.18760v4