Half of all JavaScript npm packages could have been hacked via weak credentials | Heykuki News