https://socket.dev/blog/malicious-npm-packages-hijack-cursor-editor-on-macos?utm_medium=feed