T theregister.com JavaScript registry NPM vulnerable to 'manifest confusion' abuse 15 points Dotnaught 3 years ago 11 comments