Comment by zachleat

Yo, someone at npm needs to unpublish [email protected] IMMEDIATELY. It’s still actively compromised.