https://checkmarx.com/blog/year-long-campaign-of-malicious-npm-packages-targeting-roblox-users/