https://vulert.com/blog/malicious-npm-and-vs-code-packages/