Security NPM package ‘is’ with 2.8M weekly downloads infected devs with malware by CybrGPT July 24, 2025 by CybrGPT July 24, 2025