The Landscape of Malicious Open Source Packages: 2025 Mid‑Year Threat Report socket.dev 2 points by feross 14 days ago