https://nuclearmonster.com/2016/06/typosquatting-package-managers/