NPM package poses as legit Ethereum smart contract, injects Quasar RATscworld.com2 pointsferossa year ago