Something seems off...

[Duoquote]

When I search on npm with "react log" keyword and sorted by popularity, there are lots of spam repositories, I mean like 100+ repositories. Some of them even has 500k+ or even 1.5M downloads too:

Some of them date back to 3 months too...

[grandmas-favorite]

Hi @Duoquote!

Is this a new phenomenon for you or have you noticed this in the past as well?

[Duoquote]

It never occurred to me, it just happened today when I search for "react log" and sorted by popularity.

[leobalter]

Thanks for reporting this, @Duoquote! I'll bring it to our teams and plan for the best measures to remediate and prevent it from happening again.