github: Dependabot now detects malware in npm dependencies

Dependabot can now alert on npm dependencies that match known malware advisories. When malware alerting is enabled, it checks repository npm dependencies against malicious package versions.

• Source: GitHub