https://snyk.io/blog/phishing-campaign-leveraging-the-npm-ecosystem/