Introduction Malicious actors have once over again written two a lot of typo squatted libraries to the official NPM repository that mimic a legitimate package from Roblox, the game company, intending to distribute stealing credentials, fitting remote access trojans, and infecting the compromised systems with ransomware. The bastard packages — named…