Another popular NPM library is identified using malicious package
snyk.io