npm Tooling Bug Incorrectly Marks One-Character Packages as Security Holders (opens in new tab) 聽馃拵Ruby
npm confirmed a tooling bug incorrectly marked several one-character packages as security holders and said it was working on a rollback.
Read the original article