https://jfrog.com/blog/npm-supply-chain-attack-targets-german-based-companies/