How to find NPM dependencies vulnerable to account hijacking

Security engineer Danish Tariq has proposed a defensive strategy for those looking to assess whether their web apps include dependencies tied to subvertable email domains.