https://socket.dev/blog/roblox-developers-targeted-with-npm-packages-infected-with-infostealers