NPM fixes private package names leak, serious authorization bug

bleepingcomputer.com