You’re using a Node.js framework so you npm install its package. But that package has six dependencies so they get installed too. But wait, there’s more! Each of those dependencies have their own dependencies, and each of those dependencies also have dependencies! Rince and repeat until your one package becomes 9000.

Moral of the story, Node.js packages are pathogens.