Careful: Faker-JS NPM package apparently taken over by spam | Heykuki News