Is Vaadin build affected by attacks on npm packages?

[daniel.nuetzler (Daniel Nützler)]

Thank you for the investigation.