npm packages that overlap with core node packages

How it was found

Hi,

I have posted here, but I wanted to make you aware of this easy social engineering trick. I do not want to claim any of these are currently malicious, but it they easily could be.

Thanks,

Marc

Impact

The attacker could do anything...use the postinstall as the user, work the same as steal data, etc.