http://torzcd47rw4qh36g4yqxvv2tmifgmu6jjalkyqz4e4lzzwtfdfc7qaqd.onion/npm-javascript-packages-abused-to-create-scambait-links-in-bulk-mobile-hacker-for-hire/index.html
Fortunately, the crooks (inadvertently, we assume) managed to include their list of poisonous packages in one of their uploads. Checkmarx has therefore published a list containing more than 17,000 unique bogus names, of which just a small sample (one each for the first few letters of the alphabet) shows you what sort of “goods and services” these crooks claim to offer:...