hostile - npm explorer