https://www.fortinet.com/blog/threat-research/malicious-packages-hiddin-in-npm