Npm still very vulnerable to typosquatting · HackerTrans