One more bad day for the JavaScript / npm ecosystem. I'll say again, be extra careful with vibecoded stuff on Nostr.