https://blog.phylum.io/npm-emails-validator-package-malware/