Comment by fpereiro

I believe that npm no longer allows for republishing existing versions. Wouldn't this restriction remove this vulnerability altogether?