https://www.securitynewspaper.com/2018/05/04/backdoor-hidden-npm-javascript-package/