One npm Account Publishes 964 Million Downloads Per Week. None Have Provenance.

<p>The npm account <code>ai</code> publishes seven packages. Combined, they install 964 million times per week:</p> <div class="table-wrapper-paragraph"><table> <thead> <tr> <th>Package</th> <th>Weekly downloads</th> <th>Publishers</th> <th>Risk</th> </tr> </thead> <tbody> <tr> <td>postcss</td> <td>245,612,332</td> <td>1</td> <td>CRITICAL</td> </tr> <tr> <td>nanoid</td> <td>206,588,788</td> <td>1</td> <td>CRITICAL</td> </tr> <tr> <td>caniuse-lite</td> <td>173,435,668</td> <td>1</td> <td>CRITICAL