Plexamp pi npm security?

Plex Labs
1

I read a little bit about the ongoing Shai-Hulud worm running amok with npm. Sounds pretty bad. I’m not a software engineer, but I remember the Plexamp headless for pi app using node.js, so I have to ask.

Do we know that Plexamp headless has not been affected by this?

2

We would have had to update dependencies during the period the malicious packages were active, and we didn’t (or do anything else related). So as far as I know, we’re fine.