Light shone on typo-squatting NPM supply chain attack • The Register

https://www.theregister.com/2022/07/06/npm_supply_chain_attack/