https://actu365.com/tek/securite-informatique/2021/11/17/github-addressed-two-major-vulnerabilities-in-the-npm-package-manager/