Copycat hits another npm package

https://www.securitricks.com/attackreports/copycat-hits-another-npm-package