NPM typosquatting attack targeted popular packages with 1.5B weekly downloads
mend.io