On: Malicious crossenv package on npm

[i_am_nomad]

And money for all three.

[tedunangst → i_am_nomad]

npm has about $10 million, so that shouldn't be a problem.