Comment by adudethatgolfs

Scoket was all over this - https://socket.dev/blog/npm-author-qix-compromised-in-major-...