Regtech firm SlowMist noted that recently, the NPM ecosystem experienced another large-scale package poisoning incident.