NPM REGISTRY PRANK LEAVES DEVELOPERS UNABLE TO UNPUBLISH PACKAGES

Summary from the TLDR Web Dev newsletter

On December 29th, a package named "everything" was released to the NPM registry that installed all other public packages. This resulted in an extensive network of dependencies across the entire registry that made it impossible to unpublish any package on the site.