ZoomEye finds 3,336 exposed Verdaccio npm registries

A ZoomEye title query for "Verdaccio" returned 3,336 hosts, exposing private npm registries that may be reachable from the internet. Such registries hold internal packages, publish tokens and upstream credentials, making them a supply-chain target.

• ZoomEye title query for "Verdaccio" returned 3,336 matches
• Private registries store internal packages, metadata and publish tokens
• Verdaccio often runs as a caching proxy holding upstream credentials
• Author advises checking external reachability, anonymous access and token scopes