NPM ecosystem at risk from “Manifest Confusion” attacks

NPM ecosystem at risk from “Manifest Confusion” attacks