[handstitched]

OP is the developer & maintainer of the affected packages, so the attacker was able to use their phished credentials to upload compromised versions to NPM.

[greatestdevever]

oh! understood. thanks.