This Dependency Update Looked Exactly Like an Account Takeover

https://foojay.io/today/this-dependency-update-looked-exactly-like-an-account-takeover/