I've started scanning the entire NPM registry for malware and compiling the results