Typo attacks aren't just about typing the error by hand. They are often more about fooling human visual perception. E.g. for a more large-scale attack, you cou

Typo attacks aren't just about typing the error by hand. They are often more about fooling human visual perception. E.g. for a more large-scale attack, you could replicate the whole deno.land/x/ website, which is where people often copy-paste the import snippet from. And as the sibling comment points out, typo-ed dependencies can also be introduced into existing codebases via a PR.