Surveillance Malware Hidden in NPM and PyPI Packages Targets Developers Withsocket.dev4 pointsferossa year ago