Typosquatting and Other Attacks Against Open Source Dependencies
blog.phylum.io