Another popular NPM library is identified using malicious package | Heykuki News