https://www.group-ib.com/blog/detect-npm-supply-chain-attack/