NPM is getting all the attacks and attention because it is the biggest. But there's nothing language specific to this class of attacks.