https://blog.sonatype.com/npm-packages-caught-exfiltrating-kubernetes-config-ssh-keys