https://www.sonatype.com/blog/npm-packages-rspack-vant-compromised-blocked-by-sonatype