[DDerTyp]

Noticed that after ten mins, contacted author immediatly and he seems to be working on it / restoring his account / removing malware on published packages.

Kinda "proud" on it haha :D

[jbverschoor]

Doesn’t npmjs do things like signing, pinning, and yanking packages, like rubygems?

[paulddraper]

Yes