discovered 2026-09-18
Faking npm popularity by simulating bulk installs (or otherwise inflating download counts) to gain false credibility and defeat popularity-based risk scoring.