Malicious crossenv package on npm
I've knocked together a quick tool that might help to spot such typosquatting:https://www.npmjs.com/package/check-typosquatters(It's the first time I've published anything to npm so let me know if I have done anything wrong...)It uses the list of package names from the all-the-package-names package and returns the 10 packages with the most similar names to the supplied parameter (using Levenshtein distance)It also displays their rank based on dependent packages to give an idea of how they compare in usage.I'm sure there are improvements that could be made - PRs welcome on the github repository.