https://techbuzz.nirantara.net/bogus-npm-packages-used-to-trick-software-developers-into-installing-malware/