> Blocking the word 'keygen' accomplishes absolutely nothing and is clearly stupid. The intent is almost certainly to stop a spam campaign which was using NPM

> Blocking the word 'keygen' accomplishes absolutely nothing and is clearly stupid. The intent is almost certainly to stop a spam campaign which was using NPM package pages to host links to outside sites. Similar pages have been discussed on HN previously [1]. The fact that there was actual installable software involved was irrelevant to the attacker. All they were after was a way to put their content on a high-reputation domain -- and NPM was perfect for that. [1]: https://news.ycombinator.com/item?id=35370728 https://news.ycombinator.com/item?id=35370728