https://www.planetjon.net/news/cybersecurity/malicious-npm-packages-exfiltrate-hundreds-of-developer-ssh-keys-via-github/