npm-zoo A zoo for malicious NPM packages References https://www.npmjs.com/advisories https://duo.com/decipher/hunting-malicious-npm-packages