Glossary term
What is typosquatting? Meaning for developers
Publishing a package with a name that looks like a popular one and waiting for someone to mistype it.
Learn it properly · Security for DevelopersLesson 6: Dependencies and the Supply Chain: npm, Lockfiles and GitHub ActionsHow a package you did not write can hurt you: typosquatting, install scripts, malicious updates. Lockfiles, npm audit, Dependabot, secret scanning and securing your CI.