NPM ecosystem at risk from “Manifest Confusion” attacks

https://www.bleepingcomputer.com/news/security/npm-ecosystem-at-risk-from-manifest-confusion-attacks/