http://incolumitas.com/2016/06/08/typosquatting-package-mana...
https://github.com/npm/npm/pull/4016
http://blog.npmjs.org/post/141702881055/package-install-scri...