https://socket.dev/blog/malicious-npm-packages-target-bsc-and-ethereum