Manifest Confusion

Discrepancy between a package’s metadata published in the npm registry and the actual contents of its tarball.

• attack vector
• npm
• see all