It acted as a proxy for the real npm site, which was the one to send the request...

		xx_ns 4 months ago \| parent \| context \| favorite \| on: DuckDB NPM packages 1.3.3 and 1.29.2 compromised w... It acted as a proxy for the real npm site, which was the one to send the request, intercepting the code when the user inserted it.