https://10alert.com/posts/malicious-npm-package-modifies-local-ethers/