https://www.reversinglabs.com/blog/malicious-npm-patch-delivers-reverse-shell