https://socket.dev/blog/npm-phishing-email-targets-developers-with-typosquatted-domain