https://blog.phylum.io/persistent-npm-campaign-shipping-trojanized-jquery/