https://the-sequence.com/investigating-shai-hulud https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/sha1-hulud-the-second-coming-of-the-new-npm-github-worm/