@Node Package Manager

Supabase reported a typosquat package named `supabase-javascript` on npm that mimicked its official package to phish developers, which npm removed hours later after it had already accumulated real dow…