see https://medium.com/@contact_52772/malicious-npm-packages-aut... .
For futur we can add a call to an open source api to list the ban packages. Thank you, Patrick