Comment by vasco

If you download a typosquatted package because you don't check what you type or your AI assistant got fooled I'd consider it my fault in such a case.