https://harpertech.pages.dev/posts/top-6-javascript-plugin-security-risks-942025/