Node Package Manager I presume, but everyone calls it npm because that's what it's called.

The point is that it is responsible for distribution of all the js libraries people end up using in the field, with infamously little moderation as to what packages it distributes, thus enabling bullshit like this (or the previous colors debacle).