https://socket.dev/blog/wallet-draining-npm-package-impersonates-nodemailer?utm_medium=feed