Compromising Angular via expired NPM publisher email domains
thehackerblog.com