Popular NPM linter packages hijacked via phishing to drop malware

It's impressive nobody else has registered this domain before:

$ whois npnjs.com

[..]

Creation Date: 2025-07-14T07:00:00Z