If you found a package.json file in the wild, you might find some internal packages vulnerable to a dependency confusion attack 👀

Check for it quicker using this cool new tool by JSMon:

https://app.jsmon.sh/tools/npm-validator/

#bugbountytips