login-token (npm): npm package squatted to avoid dependency confusion attacks.
Keywords: schibsted|security