8 Malicious NPM Packages Stole... Note