Why a Python Library Name Showed Up on npm: Cross-Ecosystem Impersonation Explained

I was in the middle of a Node project, hunting for a small charting helper, when a search result stopped me. The package had the exact name of a Python plotting library I have used for years. For half