Yikes. Probably a good idea to always check the number of installed before installing an npm package. That should be a hint if they are typosquatting. Npm seems to have removed these pages in <24, but who knows how often these slip through try cracks.