https://snyk.io/research/sour-mint-malicious-sdk/