Copycat hits another npm package https://www.securitricks.com/reports/copycat-hits-another-npm-package/