https://www.fortra.com/blog/threat-analysis-malicious-npm-package-leveraged-o365-phishing-attack