How not to publish malicious npm packages | Heykuki News