Checking whether an npm package "exists" stopped working

Every npm supply chain postmortem ends with the same advice: verify the package before you install...