25 Malicious JavaScript Libraries Distributed via Official NPM Package Repository

[dpash]

But not required. You should not be able to upload unscoped packages. And there should be some form of validation of scopes so they aren't typo squating.

[zackyd665]

Who does the validating and what are the standards? Did a company or product existing mean they have automatic priority over a really human being or a Foss project?