A practical checklist for evaluating npm packages (supply chain attacks, slopsquatting, etc.)

Malicious node-ipc versions published to npm in suspected maintainer account compromise

STARDUST CHOLLIMA Likely Compromises Axios npm Package