Someone hacked (maybe a malicious insider) Toptal's GitHub repo and published packages that stole GitHub auth tokens and destroyed systems
Zoinks!!!

Toptal’s GitHub Organization Hijacked: 10 Malicious Packages...
Threat actors hijacked Toptal’s GitHub org, publishing npm packages with malicious payloads that steal tokens and attempt to wipe victim systems.

Socket (socket.dev)