It was too early for me when I posted this :) There were two ideas in mind that were conflated: 1) A list for blocking the subpaths of these packages in npm th

It was too early for me when I posted this :) There were two ideas in mind that were conflated: 1) A list for blocking the subpaths of these packages in npm that could be imported. 2) A list for blocking the malicious URLs in the repos themselves. Ie they mentioned that the repos have malicious URLs that navigate you off the page. This is where something like pihole could come in handy.