Malicious crossenv package on npm
I've knocked together a quick tool that might help to spot such typosquatting:<p><a href="https://www.npmjs.com/package/check-typosquatters" rel="nofollow">https://www.npmjs.com/package/check-typosquatters</a><p>(It's the first time I've published anything to npm so let me know if I have done anything wrong...)<p>It uses the list of package names from the all-the-package-names package and returns the 10 packages with the most similar names to the supplied parameter (using Levenshtein distance)<p>It also displays their rank based on dependent packages to give an idea of how they compare in usage.<p>I'm sure there are improvements that could be made - PRs welcome on the github repository.