expired-domains

npm package hijacking via expired maintainer domains

Attackers are hijacking npm packages by buying up maintainers' expired email domains to reset account passwords — here's how it works and how to detect it.