There were two ideas in mind that were conflated:
1) A list for blocking the subpaths of these packages in npm that could be imported.
2) A list for blocking the malicious URLs in the repos themselves. Ie they mentioned that the repos have malicious URLs that navigate you off the page. This is where something like pihole could come in handy.
I’m not worried about hitting these URLs but definitely worry about the less tech savvy people in my family stumbling across these accidentally