it's pretty important -- because it appears the main goal of the malicious actor was to steal the contents of your .npmrc file, which contains credentials (sometimes)