Comment by junon

Unfortunately wouldn't have helped. They skimmed my npm-only address directly from the public endpoint.