https://www.zscaler.com/blogs/security-research/malicious-npm-packages-deliver-nodecordrat