https://vulert.com/blog/exploits-of-npm-packages/