Recent issues with npm packages

Hi all,
I would like to know your opinion, on recent issues with open-source npm packages, (faker, now ipc). I know that open source is not making a revenue, but does it give you right to bring down any project, for financial or any political reason. Don't reinvent the wheel would be put to question in recent future. I personally think wether open source or not one should be liable for his product.
Before anyone starts, I would like to say that I was not affected by those issues.