https://socket.dev/blog/lazarus-strikes-npm-again-with-a-new-wave-of-malicious-packages