Npm deprecated all malicious typosquatting libraries from this list
snyk.io