Attackers Move Past Typosquatting to Realistic Package Impersonation
Most malicious open source packages have moved beyond misspelling popular project names, instead disguising themselves as plausible plugins, configs and helpers that fit naturally into…