discovered 22 Mar 2026npqJavaScript ★ 1790 via github-topic→ View on GitHubsafely install npm packages by auditing them pre-install stageexploit scanner javascript