github.com/nrwl/nx/security/advisories/GHSA-cxm3-wv7p-598cstepsecurity.io/blog/supply-chain-secur...compromised-with-data-stealing-malware