https://socket.dev/blog/175-malicious-npm-packages-host-phishing-infrastructure?utm_medium=feed