Weaponizing OAST: How Malicious Packages Exploit NPM, PyPI, and RubyGems Forsocket.dev2 pointsferossa year ago