Title is a bit misleading.  Actual content title is &#x27;Do not underestimate credentials leaks.&#x27;<p>The article states that many popular Node.js packages have had leaks (in the past).  Also, this article was not the source of many of these leaks (example: bower&#x27;s github oauth token was expired by github itself when it was posted to the website).