https://www.fortinet.com/blog/threat-research/malicious-packages-across-open-source-registries