Hey, I'm writing an article on the state of dependency management in general but with a focus on the JavaScript community. I think we've all heard here and there than npm sometimes unilaterally removes packages from its registry, but I can't find any examples on internet after left-pad, or that weren't due to known vulnerabilities being discovered in those packages.

I'd like to know if anyone has example and can provide proof (emails, screenshot, etc) that happened in the last 3 years or so.