Snyk finds 200 malicious packages and Cobalt Strike dependency confusion trojansnyk.io3 pointslirantal4 years ago