Security Issue. Status?
Hi,
I have just read this article: https://www.bleepingcomputer.com/news/security/52-percent-of-all-javascript-npm-packages-could-have-been-hacked-via-weak-credentials/
and since koa is directly referenced, I just wanted to know if theres an status / update on this.

Thanks!