discovered 2025-03-13
nyc-config is identified in the SafeDep analysis "Typosquatt alert ! Malicious npm Package: nyc-config". Possible typosquatting against @istanbuljs/load-nyc-config with ~25M weekly downloads.