Lendasat is not affected by the recent NPM security exploit.

We do not use, either directly or as a sub-dependency, any of the libraries that were targeted.

Stay safe.