A California man has been arrested for abducting a 10-year-old child he reportedly met on social media apps Roblox and Discord, authorities said Wednesday.

Pretending to be Roblox JavaScript libraries, the two malicious npm packages were named noblox.js-proxy and noblox.js-proxies, and use typo-squatting to present themselves to anyone looking for ...